Description (CNA)
Santesoft Sante DICOM Viewer Pro is vulnerable to an out-of-bounds write, which requires a user to open a malicious DCM file, resulting in execution of arbitrary code by a local attacker.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Santesoft / Sante DICOM Viewer Pro | affected 0 through 14.1.2 |
CWE
CWE-787
References
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-079-01
- https://santesoft.com/win/sante-dicom-viewer-pro/download.html
ADP enrichment
No English description supplied.
No references supplied.