Approved changes feed: RSS · Atom

cpe:2.3:a:santesoft:dicom_editor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSantesoft (fb240e4d-09a4-5ee7-a61b-3608b917a506)
ProductDicom Editor (3d44bfa0-d79f-5bff-b8ff-122ed5c609d3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32135 vulnerable 2026-06-08 06:04:45.027525 Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability
LOW (3.3)
Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-18863.
Published: 2024-05-03T01:56:23.256Z
Updated: 2024-08-02T15:03:29.097Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32134 vulnerable 2026-06-08 06:04:45.026974 Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM images. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15629.
Published: 2024-05-03T01:56:22.551Z
Updated: 2024-08-15T18:56:14.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32133 vulnerable 2026-06-08 06:04:45.026486 Sante DICOM Viewer Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
Sante DICOM Viewer Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K images. Crafted data in a J2K image can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15628.
Published: 2024-05-03T01:56:21.851Z
Updated: 2024-08-02T15:03:29.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32132 vulnerable 2026-06-08 06:04:45.025826 Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM images. Crafted data in a DCM image can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15627.
Published: 2024-05-03T01:56:21.148Z
Updated: 2024-08-02T15:03:29.080Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32131 vulnerable 2026-06-08 06:04:45.024281 Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM images. Crafted data in a DCM image can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15626.
Published: 2024-05-03T01:56:20.395Z
Updated: 2024-08-02T15:03:29.242Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.