GCVE - cpe:2.3:a:santesoft:dicom_viewer_pro:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:santesoft:dicom_viewer_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Santesoft (`fb240e4d-09a4-5ee7-a61b-3608b917a506`)
Product	Dicom Viewer Pro (`c20037bc-fc45-5dc5-9e09-b3e5ebb0686d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-2034`	vulnerable	2026-06-08 07:55:16.417464	Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability HIGH (7.8) Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28129. Published: 2026-02-20T22:12:39.490Z Updated: 2026-02-24T14:56:03.492Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-26-104/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5481`	vulnerable	2026-06-08 07:37:24.919875	Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability HIGH (7.8) Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26168. Published: 2025-06-06T18:49:48.435Z Updated: 2025-06-09T16:49:05.586Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-25-324/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5307`	vulnerable	2026-06-08 07:35:24.612159	Santesoft Sante DICOM Viewer Pro Out-of-bounds Read HIGH (7.8) Santesoft Sante DICOM Viewer Pro contains a memory corruption vulnerability. A local attacker could exploit this issue to potentially disclose information and to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. Published: 2025-05-29T22:11:12.769Z Updated: 2025-05-30T12:51:50.096Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-148-01 https://www.santesoft.com/win/sante-dicom-viewer-pro/download.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2480`	vulnerable	2026-06-08 07:16:57.094203	Santesoft Sante DICOM Viewer Pro Out-of-bounds Write HIGH (7.8) Santesoft Sante DICOM Viewer Pro is vulnerable to an out-of-bounds write, which requires a user to open a malicious DCM file, resulting in execution of arbitrary code by a local attacker. Published: 2025-03-20T16:49:07.713Z Updated: 2025-03-20T17:51:02.902Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-079-01 https://santesoft.com/win/sante-dicom-viewer-pro/download.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1453`	vulnerable	2026-06-08 06:25:40.118325	Santesoft Sante DICOM Viewer Pro Out-of-Bounds Read HIGH (7.8) In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could allow a local attacker to disclose information or execute arbitrary code. Published: 2024-03-01T18:56:40.511Z Updated: 2024-08-15T16:04:58.703Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-058-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39431`	vulnerable	2026-06-08 06:09:37.401382	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-35986`	vulnerable	2026-06-08 06:06:28.258422	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-35734`	vulnerable	2026-06-08 06:06:27.517530	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34297`	vulnerable	2026-06-08 06:06:25.012688	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34296`	vulnerable	2026-06-08 06:06:25.012149	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34295`	vulnerable	2026-06-08 06:06:25.011714	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34294`	vulnerable	2026-06-08 06:06:25.011117	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32135`	vulnerable	2026-06-08 06:04:45.027348	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32134`	vulnerable	2026-06-08 06:04:45.026999	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32133`	vulnerable	2026-06-08 06:04:45.026318	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32132`	vulnerable	2026-06-08 06:04:45.025855	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32131`	vulnerable	2026-06-08 06:04:45.025224	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24063`	vulnerable	2026-06-08 05:40:59.558511	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24062`	vulnerable	2026-06-08 05:40:59.558058	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.