CVE-2020-6151

A memory corruption vulnerability exists in the TIFF handleCOMPRESSIONPACKBITS functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause a memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-6151

The TALOS and CVE sources confirm a memory corruption vulnerability in Accusoft ImageGear 19.7 caused by the TIFF handle_COMPRESSION_PACKBITS function. A defective test on param_2 (size/destination) combined with an unsigned cast leads to an integer overflow and an out-of-bounds write, which can ...

Vulnerability Spotlight: Code execution, memory corruption vulnerabilities in Accusoft ImageGear

Emmanuel Tacheau of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered two vulnerabilities in Accusoft ImageGear. The ImageGear library is a document-imaging developer toolkit to assist users with image conversion, creation, editing and more. There...

CVE-2020-6152: Unchecked Return Value

A code execution vulnerability exists in the DICOM parsedicommetainfo functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause an out-of-bounds write. An attacker can trigger this vulnerability by providing a victim with a malicious DICOM file...

PT-2020-18966

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.7 Description A code execution issue exists in the DICOM parse dicom meta info functionality. It can be triggered by a specially crafted malformed file, causing an out-of-bounds write. An attacker can exploit this...

CVE-2020-6151: Incorrect Type Conversion or Cast

A memory corruption vulnerability exists in the TIFF handleCOMPRESSIONPACKBITS functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause a memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

Accusoft ImageGear DICOM parse_dicom_meta_info code execution vulnerability

Talos Vulnerability Report TALOS-2020-1096 Accusoft ImageGear DICOM parsedicommetainfo code execution vulnerability September 1, 2020 CVE Number CVE-2020-6152 SUMMARY A code execution vulnerability exists in the DICOM parsedicommetainfo functionality of Accusoft ImageGear 19.7. A specially crafte...

Accusoft ImageGear TIFF handle_COMPRESSION_PACKBITS memory corruption vulnerability

Talos Vulnerability Report TALOS-2020-1095 Accusoft ImageGear TIFF handleCOMPRESSIONPACKBITS memory corruption vulnerability September 1, 2020 CVE Number CVE-2020-6151 SUMMARY A memory corruption vulnerability exists in the TIFF handleCOMPRESSIONPACKBITS functionality of Accusoft ImageGear 19.7. ...

PT-2020-18965

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.7 Description A memory corruption issue exists in the TIFF handle COMPRESSION PACKBITS functionality. This can be triggered by a specially crafted malformed file, potentially allowing an attacker to cause memory...

Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-27759)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability in the 'icoread' function of the igcore19d.dll library in Accusoft ImageGear version 19.6.0. A remote attacker can exploit this vulnerability to execute code with the help...

Accusoft ImageGear Input Validation Error Vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. An input validation error vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library in Accusoft ImageGear versions 19.4, 19.5, and 19.6. An attacker can exploit the vulnerabilit...

Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-27758)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer error vulnerability exists in the igcore19d.dll ICO icoread parser in Accusoft ImageGear version 19.5.0. An attacker can exploit this vulnerability to execute code with the help of specially...

CVE-2020-6075

An exploitable out-of-bounds write vulnerability exists in the storedatabuffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to...

CVE-2020-6082

An exploitable out-of-bounds write vulnerability exists in the icoread function of the igcore19d.dll library of Accusoft ImageGear 19.6.0. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the vict...

CVE-2020-6076

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll ICO icoread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victi...

CVE-2020-6075

An exploitable out-of-bounds write vulnerability exists in the storedatabuffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to...

CVE-2020-6082

An exploitable out-of-bounds write vulnerability exists in the icoread function of the igcore19d.dll library of Accusoft ImageGear 19.6.0. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the vict...

CVE-2020-6094

An exploitable code execution vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library of Accusoft ImageGear 19.4, 19.5 and 19.6. A specially crafted TIFF file can cause an out-of-bounds write, resulting in remote code execution. An attacker can provide a malicious file...

Out-of-bounds

An exploitable out-of-bounds write vulnerability exists in the icoread function of the igcore19d.dll library of Accusoft ImageGear 19.6.0. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the vict...

Remote code execution

An exploitable code execution vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library of Accusoft ImageGear 19.4, 19.5 and 19.6. A specially crafted TIFF file can cause an out-of-bounds write, resulting in remote code execution. An attacker can provide a malicious file...