CVE-2023-35986: Santesoft Sante DICOM Viewer Pro Stack-based Buffer Overflow
Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-35986?
CVE-2023-35986 is a vulnerability in Sante DICOM Viewer Pro that allows an attacker to execute arbitrary code.
How does CVE-2023-35986 impact Sante DICOM Viewer Pro?
CVE-2023-35986 allows an attacker to execute arbitrary code in the context of the current process in Sante DICOM Viewer Pro.
What is the severity of CVE-2023-35986?
CVE-2023-35986 has a severity rating of 7.8 (high).
How can I fix CVE-2023-35986 in Sante DICOM Viewer Pro?
To fix CVE-2023-35986 in Sante DICOM Viewer Pro, update to version 12.2.7 or later.
Is there any additional information about CVE-2023-35986?
For more information about CVE-2023-35986, refer to the official advisory from CISA: <a href="https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-285-01">https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-285-01</a>.