NetSight
high7.8

CVE-2023-39431

Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files.

Impact

Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected products

VendorProductAffected versions
SantesoftDicom Viewer Pro
before 12.2.6

Weakness classification

References