Vulnerability

Santesoft Sante DICOM Viewer Pro has two memory corruption flaws in DICOM parsing

MedDevice Cyber Staff · Oct 12 · 2 min read · Via CISA ICSMA-23-285-01

CISA published advisory ICSMA-23-285-01 on October 12, 2023, covering two vulnerabilities in Santesoft Sante DICOM Viewer Pro, versions 12.2.4 and prior. Michael Heinzl reported them.

Both come from the same root cause: the viewer does not properly validate user-supplied data when parsing DICOM files. CVE-2023-39431 (CWE-787) is an out-of-bounds write and CVE-2023-35986 (CWE-121) is a stack-based buffer overflow, each CVSS v3 7.8. Either could let an attacker execute arbitrary code in the context of the viewer process once a crafted file is opened.

Santesoft released version 12.2.6 and recommends updating to it.

Two memory bugs from one missing validation step point at a parser that needs fuzzing as a release gate.

Are you a representative of Santesoft? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

Update Sante DICOM Viewer Pro to version 12.2.6. Until every installation is updated, open DICOM files from outside sources only after they pass through a controlled import path.

Install 12.2.6. Update every Sante DICOM Viewer Pro installation at 12.2.4 or earlier.
Control DICOM intake. Bring outside studies in through a managed import rather than email or ad hoc media.
Run the viewer without admin rights. Arbitrary code runs in the viewer's context, so a standard user account limits the damage.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure. The named product rows list what the sources state about the affected product.

Required

DICOM or image parsing

Contributing

File import Named operating system

Sante DICOM Viewer Pro

DICOM or image parsing

Fix the class in your product

A crafted file drives the parser out of bounds. As the maker, validate every length and offset against the real buffer before you copy, decode in a sandboxed least-privilege process, and fuzz the path continuously so the next bug is yours to find.

Bound every copy. Check declared sizes against allocated buffers before memcpy; prefer memory-safe parsers for new work.
Sandbox the decoder. Run it least-privilege and isolated so a crash or exploit is contained, not privileged.
Fuzz as a release gate. Run malformed-input fuzzing on every file-format parser before shipping.

Mapped EMB3D mitigations

Products potentially also affected

Products whose own public documentation shares this advisory's attributes. A shared attribute is a lead, not a finding. The status column shows only what each manufacturer has said.

Product	Manufacturer	Shared with this advisory	Manufacturer status
WatchMate Software	Anumana	Same signals	No feedback feed from manufacturer
Vitrea Software Package	Canon Medical	Same signals	No feedback feed from manufacturer
Image Suite	Carestream Health	Same signals	No feedback feed from manufacturer
aPROMISE	Exini Diagnostics	Same signals	No feedback feed from manufacturer
AutoSeg	Fujifilm Healthcare	Same signals	No feedback feed from manufacturer
Synapse PACS	Fujifilm Healthcare	Same signals	No feedback feed from manufacturer
BreView	GE HealthCare	Same signals	No feedback feed from manufacturer
EchoPAC Software Only / EchoPAC Plug-in	GE HealthCare	Same signals	No feedback feed from manufacturer
MR Contour DL	GE HealthCare	Same signals	No feedback feed from manufacturer
Contour ProtégéAI+	MIM Software	Same signals	No feedback feed from manufacturer
Image Management V15	Philips	Same signals	No feedback feed from manufacturer
OptimMRI	Rebrain	Same signals	No feedback feed from manufacturer
syngo Application Software	Siemens Healthineers	Same signals	No feedback feed from manufacturer
Glaucoma Module	Topcon Healthcare	Same signals	No feedback feed from manufacturer
ARIA Radiation Therapy Management	Varian	Same signals	No feedback feed from manufacturer

Questions & Answers

What are CVE-2023-39431 and CVE-2023-35986 in Sante DICOM Viewer Pro?

CVE-2023-39431 is an out-of-bounds write and CVE-2023-35986 a stack-based buffer overflow, each CVSS v3 7.8, in Santesoft Sante DICOM Viewer Pro 12.2.4 and prior, triggered by crafted DICOM files and able to run arbitrary code. CISA published them in ICSMA-23-285-01 on October 12, 2023.

Which Sante DICOM Viewer Pro version fixes ICSMA-23-285-01?

Santesoft recommends updating Sante DICOM Viewer Pro to version 12.2.6, which fixes CVE-2023-39431 and CVE-2023-35986, per CISA advisory ICSMA-23-285-01 from October 12, 2023.

← Back to Vulnerabilities