CVE-2020-13561

An out-of-bounds write vulnerability exists in the TIFF parser of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-13571

CVE-2020-13571 affects Accusoft ImageGear 19.8, specifically the SGI RLE decompression path. The Talos analysis details an out-of-bounds write in sgiread (sgiread.c) caused by a missing input-size check in the RLE decoding flow, leading to a memory overwrite during a ReadFile/IO_read sequence. Ke...

CVE-2020-13571

An out-of-bounds write vulnerability exists in the SGI RLE decompression functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-13585

An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-13585

CVE-2020-13585 affects Accusoft ImageGear 19.8 PSD header processing. The vulnerability arises from a buffer allocation bug in psd_header_processing: alloc_size is derived from image width and bit depth, and _oobw_buffer is allocated via AF_memm_alloc using size from file data; AF_memm_alloc wrap...

Vulnerability Spotlight: Accusoft ImageGear vulnerabilities could lead to code execution

Marcin Towalski, Emmanuel Tacheau and another Cisco Talos team member discovered these vulnerabilities. Blog by Jon Munshaw. Accusoft ImageGear contains two remote code execution vulnerabilities. ImageGear is a document and imaging library from Accusoft that developers can use to build their...

Accusoft ImageGear SGI RLE decompression out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2020-1182 Accusoft ImageGear SGI RLE decompression out-of-bounds write vulnerability February 9, 2021 CVE Number CVE-2020-13571 Summary An out-of-bounds write vulnerability exists in the SGI RLE decompression functionality of Accusoft ImageGear 19.8. A specially...

Accusoft ImageGear TIFF index record out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the TIFF parser of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Accusoft ImageGear 19.8 Product URLs...

Accusoft ImageGear 缓冲区错误漏洞

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the TIFF parser of Accusoft ImageGear 19.8. An attacker can exploit this vulnerability via specially crafted files to achieve code execution...

Accusoft ImageGear 缓冲区错误漏洞

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the SGI RLE decompression feature of Accusoft ImageGear 19.8. An attacker could exploit this vulnerability via specially crafted files to achieve code executio...

Accusoft ImageGear 缓冲区错误漏洞

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the PSD Header handling feature of Accusoft ImageGear 19.8. An attacker could exploit this vulnerability via specially crafted files to achieve code execution...

Accusoft ImageGear 缓冲区错误漏洞

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. A heap overflow vulnerability exists in the way the GIF parser in Accusoft ImageGear 19.8 decodes LZW compressed streams. An attacker can exploit this vulnerability to execute arbitrary code via specially...

Accusoft ImageGear PSD Header processing out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Accusoft ImageGear 19.8...

Accusoft ImageGear GIF LZW decoder heap overflow vulnerability

Summary A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8. A specially crafted malformed file can trigger a heap overflow, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this...

Accusoft ImageGear Out-of-Bounds Write Vulnerability

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the DICOM parsedicommetainfo function in Accusoft ImageGear 19.7. An attacker can exploit this vulnerability to achieve code execution via a specially crafted...

Accusoft ImageGear Memory Corruption Vulnerability

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. A memory corruption vulnerability exists in the TIFF handleCOMPRESSIONPACKBITS function in Accusoft ImageGear 19.7. An attacker can exploit the vulnerability via a specially crafted file to cause memory...

CVE-2020-6151

A memory corruption vulnerability exists in the TIFF handleCOMPRESSIONPACKBITS functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause a memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-6151

A memory corruption vulnerability exists in the TIFF handleCOMPRESSIONPACKBITS functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause a memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-6152

A code execution vulnerability exists in the DICOM parsedicommetainfo functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause an out-of-bounds write. An attacker can trigger this vulnerability by providing a victim with a malicious DICOM file...

CVE-2020-6152

A code execution vulnerability exists in the DICOM parsedicommetainfo functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause an out-of-bounds write. An attacker can trigger this vulnerability by providing a victim with a malicious DICOM file...