CVE-2020-6089

An exploitable code execution vulnerability exists in the ANI file format parser of Leadtools 20. A specially crafted ANI file can cause a buffer overflow resulting in remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-6089

Leadtools 20 contains an exploitable buffer overflow in the ANI file format parser (lfAniX.DLL). The TALOS analysis details the ANI header parsing (ANIH) and RATE header handling: a buffer is allocated based on the RATE.display_rate, then populated with 4 * anih_header.width bytes. If a crafted R...