Sante DICOM Viewer Pro Buffer Overflow Vulnerability Leading to Remote Code Execution

A buffer overflow vulnerability has been identified in Sante DICOM Viewer Pro, specifically in the parsing of DCM files. This issue allows remote attackers to execute arbitrary code on affected installations. The vulnerability arises from inadequate validation of user-supplied data length before it is copied to a buffer, creating an opportunity for code execution in the context of the current process. Exploitation requires user interaction, as the target must open a malicious file or visit a harmful webpage.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Remediation

Users can upgrade to Sante DICOM Viewer Pro version 14.2.7 to address this vulnerability.