CVE-2022-24064

CVE-2022-24064 affects Sante DICOM Viewer Pro 11.8.8.0. The vulnerability lies in the J2K image parsing code, where crafted data in a J2K file can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (the target must visit a m...

CVE-2022-24063

CVE-2022-24063 affects Sante DICOM Viewer Pro 13.2.0.21165. The issue is a memory corruption caused by improper validation in the JP2 file parsing path, enabling arbitrary code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user interaction, and ZDI...

CVE-2022-24062

CVE-2022-24062 affects Sante DICOM Viewer Pro 13.2.0.21165. The issue arises in JP2 file parsing where the code fails to validate the existence of an object before performing operations, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a...

CVE-2022-24062

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

CVE-2022-24061

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-24061

CVE-2022-24061 affects Sante DICOM Viewer Pro (11.8.7.0). The vulnerability lies in DCM file parsing where the code fails to validate the existence of an object before operating on it, enabling an information disclosure condition. The ZDI advisory (ZDI-22-253) labels it as a Use-After-Free Inform...

CVE-2022-24060

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-24060

The CVE-2022-24060 entry affects Sante DICOM Viewer Pro 11.8.7.0. The vulnerability stems from the parsing of DCM files, where crafted DCM data can trigger a read past the end of an allocated buffer. This can disclose sensitive information and, in conjunction with other vulnerabilities, could ena...

CVE-2022-24059

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2022-24059

CVE-2022-24059 concerns Sante DICOM Viewer Pro 11.8.7.0. Multiple connected sources (e.g., ZDI-22-251, Red Hat, CNVD/CVEs) confirm a vulnerability in the DCM file parser: crafted DCM data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the...

CVE-2022-24058

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2022-24058

CVE-2022-24058 affects Sante DICOM Viewer Pro 11.8.7.0. The flaw lies in the parsing of J2K files, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a m...

CVE-2022-24057

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2022-24057

Sante DICOM Viewer Pro 11.8.7.0 is affected by CVE-2022-24057 due to a flaw in J2K file parsing. Crafted J2K data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malic...

CVE-2022-24056

Summary (Mature details available): CVE-2022-24056 affects Sante DICOM Viewer Pro (e.g., 11.8.7.0). The root cause is a flaw in the J2K file parsing logic that can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitati...

CVE-2022-24056

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2022-24055

Sante DICOM Viewer Pro 11.8.7.0 is affected by CVE-2022-24055 due to a flaw in GIF file parsing. The issue arises from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer and enabling information disclosure. It requires user interaction (target must v...

Sante DICOM Viewer Pro J2K Remote Code Execution Vulnerability (CNVD-2022-14985)

Sante DICOM Viewer Pro is a medical DICOM image viewer. sante DICOM Viewer Pro J2K remote code execution vulnerability can be exploited by attackers to execute code in the context of the current process...

Sante DICOM Viewer Pro GIF Information Disclosure Vulnerability

Sante DICOM Viewer Pro is a medical DICOM image viewer.An information disclosure vulnerability exists in Sante DICOM Viewer Pro GIF, which can be exploited by attackers to execute arbitrary code in the context of the current process along with other vulnerabilities...

Sante DICOM Viewer Pro JP2 Remote Code Execution Vulnerability

Sante DICOM Viewer Pro is a medical DICOM image viewer.A remote code execution vulnerability exists in Sante DICOM Viewer Pro JP2, which can be exploited by attackers to execute code in the context of the current process...