A critical buffer overflow vulnerability in Sante DICOM Viewer Pro could allow remote attackers to execute arbitrary code on affected systems via malicious file processing.

The vulnerability is a buffer overflow (CWE-120) triggered during the parsing of DCM files due to insufficient length validation of user-supplied data. The attack requires user interaction, such as opening a specially crafted file, and affects unauthenticated users who are successfully lured into performing the action.

The ability for an attacker to execute arbitrary code within the context of the current process poses a significant threat to data confidentiality, integrity, and availability. Given the CVSS score of 7.8, this vulnerability is classified as High severity, as successful exploitation could lead to full system compromise or the unauthorized access of sensitive medical imaging data.

Immediate Action: Users should restrict the opening of untrusted DCM files and monitor the vendor's website for an official patch release, as no fix is currently confirmed.

Proactive Monitoring: Security teams should review endpoint logs for abnormal crashes or unexpected process execution associated with the DICOM viewer application.

Compensating Controls: Deploy endpoint protection solutions capable of detecting buffer overflow attempts and utilize application whitelisting or sandboxing to isolate the viewing process from the host operating system.

Public Exploit Available: Unknown.

This vulnerability presents a clear risk to environments utilizing Sante DICOM Viewer Pro. While user interaction is a prerequisite for exploitation, the impact of arbitrary code execution is severe. Organizations should prioritize isolating systems that handle external DCM files until a vendor-supplied patch is identified and applied.