JVN#40367518: SonicDICOM Media Viewer may insecurely load Dynamic Link Libraries

2024-03-2700:00:00

Japan Vulnerability Notes

jvn.jp

sonicdicom

fujidenolo solutions co.

dll insecure loading

arbitrary code execution

software update

version 2.3.2

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

SonicDICOM Media Viewer provided by Fujidenolo Solutions Co., Ltd. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).

Impact

Arbitrary code may be executed with the privileges of the running application.

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.

Products Affected

SonicDICOM Media Viewer versions 2.3.2 and earlier