CVE-2020-6064: High severity Accusoft ImageGear vulnerability
An exploitable out-of-bounds write vulnerability exists in the uncompressscanline function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Accusoft ImageGear igcore19d.dllto a version that resolves this vulnerability.Fixed in 19.5.0
Event History
Frequently Asked Questions
What is CVE-2020-6064?
CVE-2020-6064 is an exploitable out-of-bounds write vulnerability in the uncompress_scan_line function of the igcore19d.dll library of Accusoft ImageGear version 19.5.0.
How severe is CVE-2020-6064?
CVE-2020-6064 has a severity rating of 8.8 (critical).
Which software versions are affected by CVE-2020-6064?
Accusoft ImageGear version 19.5.0 is affected by CVE-2020-6064.
What is the impact of CVE-2020-6064?
CVE-2020-6064 can result in remote code execution when a specially crafted PCX file triggers an out-of-bounds write.
Is there a fix available for CVE-2020-6064?
At the moment, there is no information available about a fix for CVE-2020-6064. It is recommended to follow the guidance provided by the vendor or product team.