ZDI-23-970: (0Day) Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-970?
The severity of ZDI-23-970 is categorized as a medium risk due to the requirement for user interaction.
How do I fix ZDI-23-970?
To fix ZDI-23-970, update Sante DICOM Viewer Pro to the latest version that addresses this vulnerability.
What information can be disclosed due to ZDI-23-970?
ZDI-23-970 allows remote attackers to disclose sensitive information from affected installations.
Is user interaction necessary for ZDI-23-970 exploitation?
Yes, user interaction is required for ZDI-23-970, as the target needs to visit a malicious page or open a harmful file.
Which software is affected by ZDI-23-970?
ZDI-23-970 specifically affects Sante DICOM Viewer Pro installations.