Out-of-bounds

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFF tifread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted TIFF file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the...

Out-of-bounds

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

CVE-2020-6067

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFF tifread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted TIFF file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the...

CVE-2020-6066

CVE-2020-6066 affects Accusoft ImageGear 19.5.0, specifically igcore19d.dll JPEG SOFx parser. A malformed JPEG can trigger an out-of-bounds write in the SOFx code path, enabling remote code execution. Talos reports 19.5.0 as affected and notes an official update to 19.6 is available to resolve th...

CVE-2020-6067

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFF tifread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted TIFF file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the...

CVE-2020-6067

CVE-2020-6067 affects Accusoft ImageGear 19.5.0 (igcore19d.dll) TIFF tifread parser. A crafted TIFF file can trigger an out-of-bounds write, enabling remote code execution. Affected product/version: ImageGear 19.5.0. Root cause: out-of-bounds write in tifread handling. Public disclosures include ...

CVE-2020-6063

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

CVE-2020-6063

Summary of findings (CVE-2020-6063): The affected software is Accusoft ImageGear (igcore19d.dll, v19.5.0). The vulnerability is an exploitable out-of-bounds write in the PCX processing path, specifically uncompress_scan_line, caused by a signed comparison in PCX header handling (Xmin vs Xmax) lea...

CVE-2020-6069

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG jpegread precision parser of the Accusoft ImageGear 19.5.0 library. A specially crafted JPEG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file...

CVE-2020-6069

CVE-2020-6069 affects Accusoft ImageGear 19.5.0 (igcore19d.dll) JPEG jpegread precision parser. A crafted JPEG file can trigger an out-of-bounds write, enabling remote code execution. The TALOS advisory confirms a code-execution path in the igcore19d.dll with a 19.5.0 target and notes a fix/updat...

CVE-2020-6064

CVE-2020-6064 affects Accusoft ImageGear 19.5.0 (igcore19d.dll). Talos and Red Hat disclosures describe an exploitable out-of-bounds write in uncompress_scan_line used to decompress PCX data, triggered by a malformed PCX file. The issue stems from insufficient sanity checks and buffer sizing: com...

CVE-2020-6064

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

CVE-2020-6065

An exploitable out-of-bounds write vulnerability exists in the bmpparsing function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted BMP file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file...

CVE-2020-6065

An exploitable out-of-bounds write exists in Accusoft ImageGear igcore19d.dll v19.5.0, in bmp_parsing. The issue stems from calculating total_width as 4 * width without overflow protection, leading to an incorrect allocation and out-of-bounds writes while parsing BMP data, enabling remote code ex...

PT-2020-18906 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.5.0 Description: A specially crafted TIFF file can cause an out-of-bounds write in the igcore19d.dll TIFF tifread parser, resulting in remote code execution. An attacker needs to provide a malformed file to the...

PT-2020-18908 · Accusoft · Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.5.0 Description: The issue is related to an out-of-bounds write vulnerability in the igcore19d.dll JPEG jpegread precision parser. It can be triggered by a specially crafted JPEG file, potentially leading to remo...

PT-2020-18905 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.5.0 Description: An out-of-bounds write issue exists in the igcore19d.dll JPEG SOFx parser. A specially crafted JPEG file can cause this issue, resulting in remote code execution. An attacker needs to provide a...

Vulnerability Spotlight: Accusoft ImageGear library code execution vulnerabilities

Emmanuel Tacheau of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered three code execution vulnerabilities in Accusoft ImageGear. The ImageGear library is a document-imaging developer toolkit to assist users with image conversion, creation, editing...

Accusoft ImageGear BMP bmp_parsing buffer size computation code execution vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the bmpparsing function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted BMP file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

Accusoft ImageGear PCX uncompress_scan_line buffer copy operation code execution vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide ...