CVE-2020-6094

An exploitable code execution vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library of Accusoft ImageGear 19.4, 19.5 and 19.6. A specially crafted TIFF file can cause an out-of-bounds write, resulting in remote code execution. An attacker can provide a malicious file...

CVE-2020-6094

The vulnerability CVE-2020-6094 affects Accusoft ImageGear 19.4–19.6 (igcore19d.dll). A TIFF file can cause an out-of-bounds write in fill_in_raster due to an integer overflow in compute_size_from_bibitWidth_operations, which computes heap_buffer size from SamplesPerPixel and biWidth. An attacker...

Vulnerability Spotlight: Multiple code execution vulnerabilities in Accusoft ImageGear

Emmanuel Tacheau of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered four code execution vulnerabilities in Accusoft ImageGear. The ImageGear library is a document-imaging developer toolkit to assist users with image conversion, creation, editing...

Accusoft ImageGear PNG store_data_buffer size computation code execution vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the storedatabuffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed...

Accusoft ImageGear ICO icoread code execution vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll ICO icoread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to t...

Accusoft ImageGear TIFF fill_in_raster buffer copy operation code execution vulnerability

Summary An exploitable code execution vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library of Accusoft ImageGear 19.4, 19.5 and 19.6. A specially crafted TIFF file can cause an out-of-bounds write, resulting in remote code execution. An attacker can provide a...

Accusoft ImageGear ICO ico_read buffer size computation code execution vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the icoread function of the igcore19d.dll library of Accusoft ImageGear 19.6.0. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to...

Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-16505)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability exists in the 'uncompressscanline' function of the igcore19d.dll library in Accusoft ImageGear version 19.5.0. A remote attacker could exploit this vulnerability to execut...

Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-16507)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability exists in the JPEG raster image parser igcore19d.dll in Accusoft ImageGear version 19.5.0. A remote attacker could exploit this vulnerability to execute code...

Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-16504)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability exists in the 'uncompressscanline' function of the igcore19d.dll library in Accusoft ImageGear version 19.5.0. A remote attacker could exploit this vulnerability to execut...

Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-16502)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability exists in the JPEG SOFx parser igcore19d.dll in Accusoft ImageGear version 19.5.0. A remote attacker could exploit the vulnerability to execute code...

Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-13500)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability exists in the PNG raster image parser in Accusoft ImageGear version 19.5.0. The vulnerability can be exploited by an attacker to execute code with the help of a specially...

A week in security (February 10 – 16)

Last week on Malwarebytes Labs, we explained how to battle online coronavirus scams with facts, discussed the persistent re-infection techniques of Android/Trojan.xHelper and how to remove it, provided cyber tips for safe online dating, and showed how Hollywood teaches us misleading cybersecurity...

Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-10428)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability exists in the 'TIFreadstripdata' function of the igcore19d.dll library in Accusoft ImageGear version 19.5.0. The vulnerability originates when a networked system or produc...

CVE-2019-5187

An exploitable out-of-bounds write vulnerability exists in the TIFreadstripdata function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted TIFF file file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed...

CVE-2019-5187

An exploitable out-of-bounds write vulnerability exists in the TIFreadstripdata function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted TIFF file file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed...

CVE-2020-6068

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG pngread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victi...

Out-of-bounds

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG pngread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victi...

Out-of-bounds

An exploitable out-of-bounds write vulnerability exists in the TIFreadstripdata function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted TIFF file file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed...

CVE-2019-5187

An out-of-bounds write in ImageGear igcore19d.dll (TIF_read_stripdata) of version 19.5.0 enables remote code execution when processing certain TIFF strips. The vulnerability arises during stripe data handling: dstBuffer size is computed via two paths using imagewidth (ImageWidth tag) and bits-per...