CVE-2020-6069

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG jpegread precision parser of the Accusoft ImageGear 19.5.0 library. A specially crafted JPEG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file...

CVE-2020-6069

CVE-2020-6069 affects Accusoft ImageGear 19.5.0 (igcore19d.dll) JPEG jpegread precision parser. A crafted JPEG file can trigger an out-of-bounds write, enabling remote code execution. The TALOS advisory confirms a code-execution path in the igcore19d.dll with a 19.5.0 target and notes a fix/updat...

CVE-2020-6064

CVE-2020-6064 affects Accusoft ImageGear 19.5.0 (igcore19d.dll). Talos and Red Hat disclosures describe an exploitable out-of-bounds write in uncompress_scan_line used to decompress PCX data, triggered by a malformed PCX file. The issue stems from insufficient sanity checks and buffer sizing: com...

CVE-2020-6064

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

CVE-2020-6065

An exploitable out-of-bounds write exists in Accusoft ImageGear igcore19d.dll v19.5.0, in bmp_parsing. The issue stems from calculating total_width as 4 * width without overflow protection, leading to an incorrect allocation and out-of-bounds writes while parsing BMP data, enabling remote code ex...

CVE-2020-6065

An exploitable out-of-bounds write vulnerability exists in the bmpparsing function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted BMP file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file...

CVE-2020-6063: Out-of-bounds Write

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

CVE-2020-6069: Out-of-bounds Write

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG jpegread precision parser of the Accusoft ImageGear 19.5.0 library. A specially crafted JPEG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file...

PT-2020-2723

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.6.0 Description The issue is related to an out-of-bounds write vulnerability in the ico read function of the igcore19d.dll library. This vulnerability can be triggered by a specially crafted ICO file, potentially...

PT-2020-18902

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.5.0 Description An out-of-bounds write issue exists in the uncompress scan line function of the igcore19d.dll library. This can be triggered by a specially crafted PCX file, potentially leading to remote code...

PT-2020-18904

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.5.0 Description An out-of-bounds write issue exists in the bmp parsing function of the igcore19d.dll library. This can be triggered by a specially crafted BMP file, potentially leading to remote code execution. An...

PT-2020-18905 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.5.0 Description: An out-of-bounds write issue exists in the igcore19d.dll JPEG SOFx parser. A specially crafted JPEG file can cause this issue, resulting in remote code execution. An attacker needs to provide a...

CVE-2020-6066: Out-of-bounds Write

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG SOFx parser of the Accusoft ImageGear 19.5.0 library. A specially crafted JPEG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim...

PT-2020-18906 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.5.0 Description: A specially crafted TIFF file can cause an out-of-bounds write in the igcore19d.dll TIFF tifread parser, resulting in remote code execution. An attacker needs to provide a malformed file to the...

PT-2020-18908 · Accusoft · Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.5.0 Description: The issue is related to an out-of-bounds write vulnerability in the igcore19d.dll JPEG jpegread precision parser. It can be triggered by a specially crafted JPEG file, potentially leading to remo...

CVE-2020-6067: Out-of-bounds Write

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFF tifread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted TIFF file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the...

PT-2020-18903

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.5.0 Description An out-of-bounds write issue exists in the uncompress scan line function of the igcore19d.dll library. This can be triggered by a specially crafted PCX file, potentially leading to remote code...

CVE-2020-6064: Out-of-bounds Write

An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a...

CVE-2020-6065: Out-of-bounds Write

An exploitable out-of-bounds write vulnerability exists in the bmpparsing function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted BMP file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file...

Vulnerability Spotlight: Accusoft ImageGear library code execution vulnerabilities

Emmanuel Tacheau of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered three code execution vulnerabilities in Accusoft ImageGear. The ImageGear library is a document-imaging developer toolkit to assist users with image conversion, creation, editing...