CVE-2020-6094CWE-190

An exploitable code execution vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library of Accusoft ImageGear 19.4, 19.5 and 19.6

Critical · published May 6, 2020

CVSS v3.0
9.8
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

An exploitable code execution vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library of Accusoft ImageGear 19.4, 19.5 and 19.6. A specially crafted TIFF file can cause an out-of-bounds write, resulting in remote code execution. An attacker can provide a malicious file to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
9.8 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03687 · 89.6th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2020-05-06T12:33Z
EPSS history
Timeline
  • 06 MAY 12:33Z
    An exploitable code execution vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library of Accusoft ImageGear 19.4, 19.5 and 19.6
    cvelistv5