CVE-2019-5133: Critical severity accusoft imagegear vulnerability

Published Dec 3, 2019

Updated

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll BMP parser of the ImageGear 19.3.0 library. A specially crafted BMP file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=19.3.0

Event History

Dec 3, 2019

CVE Published

via MITRE·09:26 PM

Data Sourced

via MITRE·09:26 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-5133?

CVE-2019-5133 has been rated as a high severity vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2019-5133?

To fix CVE-2019-5133, users should upgrade to the latest version of AccuSoft ImageGear that addresses this vulnerability.

What causes the CVE-2019-5133 vulnerability?

CVE-2019-5133 is caused by an out-of-bounds write in the BMP parser of the igcore19d.dll file within the ImageGear 19.3.0 library.

Can CVE-2019-5133 be exploited remotely?

Yes, CVE-2019-5133 can be remotely exploited by an attacker sending a specially crafted BMP file to the victim.

What impact does CVE-2019-5133 have on affected systems?

The impact of CVE-2019-5133 on affected systems includes the potential for remote code execution, leading to unauthorized access or control.