CVE-2019-5076

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGear 19.3.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victio...

CVE-2019-5083

CVE-2019-5083 affects Accusoft ImageGear 19.3.0: the igcore19d.dll TIF_decode_thunderscan function contains an out-of-bounds write that enables remote code execution when processing a crafted TIFF file. The TALOS advisory confirms the vulnerability in ImageGear 19.3.0 and notes a public mitigatio...

Accusoft ImageGear Buffer Overflow Vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability exists in Accusoft ImageGear. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries,...

PT-2019-17464

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.3.0 Description An exploitable out-of-bounds write issue exists in the TIFdecodethunderscan function of the igcore19d.dll library. This can be triggered by a specially crafted TIFF file, causing an out-of-bounds...

PT-2019-17458

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.3.0 Description An out-of-bounds write issue exists in the igcore19d.dll PNG header-parser. A specially crafted PNG file can cause this issue, resulting in remote code execution. An attacker needs to provide a...

CVE-2019-5132: Out-of-bounds Write

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll GEM Raster parser of the Accusoft ImageGear 19.3.0 library. A specially crafted GEM file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim...

CVE-2019-5076: Out-of-bounds Write

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGear 19.3.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victio...

CVE-2019-5083: Out-of-bounds Write

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFdecodethunderscan function of Accusoft ImageGear 19.3.0 library. A specially crafted TIFF file can cause an out of bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to t...

PT-2019-17497

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.3.0 Description An out-of-bounds write issue exists in the igcore19d.dll GEM Raster parser of the library. This can be triggered by a specially crafted GEM file, potentially leading to remote code execution. An...

Vulnerability Spotlight: Accusoft ImageGear PNG IHDR width code execution vulnerability

Marcin Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Accusoft ImageGear contains two remote code execution vulnerabilities. ImageGear is a document and imaging library from Accusoft that developers can use to build their applications. The library contains the entire...

Accusoft ImageGear PNG IHDR width code execution vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGear 19.3.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to th...

Accusoft ImageGear BMP code execution vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll BMP parser of the ImageGear 19.3.0 library. A specially crafted BMP file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to...

Accusoft ImageGear GEM Raster Code Execution Vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll GEM Raster parser of the Accusoft ImageGear 19.3.0 library. A specially crafted GEM file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to th...

Accusoft ImageGear TIFF TIF_decode_thunderscan code execution vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFdecodethunderscan function of Accusoft ImageGear 19.3.0 library. A specially crafted TIFF file can cause an out of bounds write, resulting in a remote code execution. An attacker needs to provide a malformed...

CVE-2018-15805

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...

Xxe

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...

CVE-2018-15805

CVE-2018-15805 affects Accusoft PrizmDoc HTML5 Document Viewer prior to version 13.5. The vulnerability is an XML external entity (XXE) flaw that enables an attacker to read arbitrary files or trigger resource exhaustion leading to denial of service. The root cause is improper handling of XML ext...

CVE-2018-15805

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...

PT-2018-13218

Name of the Vulnerable Software and Affected Versions Accusoft PrizmDoc HTML5 Document Viewer versions prior to 13.5 Description The issue allows an attacker to read arbitrary files or cause a denial of service due to an XML external entity XXE vulnerability. Recommendations For versions prior to...

CVE-2018-15805: Improper Restriction of XML External Entity Reference

Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity XXE vulnerability, allowing an attacker to read arbitrary files or cause a denial of service resource consumption...