Santesoft Sante DICOM Viewer Pro

Summary

Vulnerabilities 1

• High 7.8
  CVE-2025-5307

  Santesoft Sante DICOM Viewer Pro Out-of-bounds Read

  Santesoft Sante DICOM Viewer Pro contains a memory corruption vulnerability. A local attacker could exploit this issue to potentially disclose information and to execute arbitrary code on affected installations of Sante DICOM Viewer Pro.

  Santesoft Sante DICOM Viewer Pro
  May 29, 2025

Revision history

1. 2025-05-29 #1

   Initial Publication

References

• ICSA Advisory ICSMA-25-148-01 - Web Version
  https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-148-01
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B