Accusoft ImageGear BMP code execution vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll BMP parser of the ImageGear 19.3.0 library. A specially crafted BMP file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to...

Accusoft ImageGear PNG IHDR width code execution vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGear 19.3.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to th...

Accusoft ImageGear GEM Raster Code Execution Vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll GEM Raster parser of the Accusoft ImageGear 19.3.0 library. A specially crafted GEM file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to th...

Accusoft ImageGear TIFF TIF_decode_thunderscan code execution vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFdecodethunderscan function of Accusoft ImageGear 19.3.0 library. A specially crafted TIFF file can cause an out of bounds write, resulting in a remote code execution. An attacker needs to provide a malformed...

CVE-2018-15805

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...

Xxe

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...

CVE-2018-15805

CVE-2018-15805 affects Accusoft PrizmDoc HTML5 Document Viewer prior to version 13.5. The vulnerability is an XML external entity (XXE) flaw that enables an attacker to read arbitrary files or trigger resource exhaustion leading to denial of service. The root cause is improper handling of XML ext...

CVE-2018-15805

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...

CVE-2018-15546

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file...

Cross site scripting

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file...

CVE-2018-15546

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file...

CVE-2018-15546

Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting vulnerability triggered by a specially crafted PDF file. The issue affects PrizmDoc’s handling of PDFs, enabling injection of script/HTML that could be executed in a victim’s browser. Documented across CVE-2018-1554...

CVE-2016-9500

Accellion FTP server prior to version FTA912220 uses the Accusoft Prizm Content flash component, which contains multiple parameters customTabCategoryName, customButton1Image that are vulnerable to cross-site scripting...

Cross site scripting

Accellion FTP server prior to version FTA912220 uses the Accusoft Prizm Content flash component, which contains multiple parameters customTabCategoryName, customButton1Image that are vulnerable to cross-site scripting...

CVE-2016-9500 The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to informaiton exposure

Accellion FTP server prior to version FTA912220 uses the Accusoft Prizm Content flash component, which contains multiple parameters customTabCategoryName, customButton1Image that are vulnerable to cross-site scripting...

forms.accusoft.com XSS vulnerability

Vulnerable URL: http://forms.accusoft.com/barcodemobiledownload.htm?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Arbitrary File Upload and Code Execution in Accusoft Prizm Content Connect

In the course of our security assessment consulting we often find 0day vulnerabilities and report them to vendors. In this particular case the vendor has unfortunately shown a general disregard for the security risk of this uncovered vulnerability which was originally disclosed privately to them ...

Buffer overflow

Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party source...

CVE-2007-2209

Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party source...

CVE-2007-2209

A concrete vulnerability described across multiple sources: Buffer overflow in igcore15d.dll versions 15.1.2.0 and 15.2.0.0 used by AccuSoft ImageGear, including Corel Paint Shop Pro Photo 11.20, may allow user-assisted remote code execution via a crafted .CLP file. The underlying issue is a buff...