CVE-2019-5132: Critical severity accusoft imagegear vulnerability

Published Dec 3, 2019

Updated

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll GEM Raster parser of the Accusoft ImageGear 19.3.0 library. A specially crafted GEM file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=19.3.0

Event History

Dec 3, 2019

CVE Published

via MITRE·09:25 PM

Data Sourced

via MITRE·09:25 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-5132?

CVE-2019-5132 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2019-5132?

To remediate CVE-2019-5132, upgrade Accusoft ImageGear to version 19.4.0 or later.

What type of vulnerability is CVE-2019-5132?

CVE-2019-5132 is an out-of-bounds write vulnerability affecting the GEM Raster parser in Accusoft ImageGear.

Who is affected by CVE-2019-5132?

Users of Accusoft ImageGear version 19.3.0 are affected by CVE-2019-5132.

What can an attacker do with CVE-2019-5132?

An attacker can exploit CVE-2019-5132 to execute arbitrary code on the victim's machine by providing a specially crafted GEM file.