CVE-2020-6068: High severity Accusoft ImageGear vulnerability

Published Feb 14, 2020

Updated

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG pngread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=19.5.0

Event History

Feb 14, 2020

CVE Published

via MITRE·09:20 PM

Data Sourced

via MITRE·09:20 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2020-6068.

What is the severity of CVE-2020-6068?

CVE-2020-6068 has a severity of critical with a CVSS score of 8.8.

What software is affected by CVE-2020-6068?

AccuSoft ImageGear version 19.5.0 is affected by CVE-2020-6068.

How does CVE-2020-6068 exploit the system?

CVE-2020-6068 can be exploited by providing a specially crafted PNG file, which triggers an out-of-bounds write and allows remote code execution.

Is there a fix for CVE-2020-6068?

AccuSoft ImageGear users should update to a patched version or apply the necessary security patches provided by the vendor to fix CVE-2020-6068.