CVE-2020-6082: Critical severity accusoft imagegear vulnerability

Published May 6, 2020

Updated

An exploitable out-of-bounds write vulnerability exists in the icoread function of the igcore19d.dll library of Accusoft ImageGear 19.6.0. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.

Affected Software

3 affected components

Accusoft ImageGear=19.4.0

Accusoft ImageGear=19.5.0

Accusoft ImageGear=19.6.0

Event History

May 6, 2020

CVE Published

via MITRE·12:33 PM

Data Sourced

via MITRE·12:33 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2020-6082?

CVE-2020-6082 is an out-of-bounds write vulnerability in the ico_read function of the igcore19d.dll library of Accusoft ImageGear 19.6.0.

What is the severity of CVE-2020-6082?

CVE-2020-6082 has a severity rating of 8.8, which is considered critical.

How does CVE-2020-6082 work?

CVE-2020-6082 can be exploited by providing a specially crafted ICO file, which can lead to an out-of-bounds write and remote code execution.

Which software versions are affected by CVE-2020-6082?

Accusoft ImageGear versions 19.4.0, 19.5.0, and 19.6.0 are affected by CVE-2020-6082.

How can CVE-2020-6082 be fixed?

Updating to the latest version of Accusoft ImageGear (version 19.6.1 or later) will fix the CVE-2020-6082 vulnerability.