Code Execution Vulnerabilities Patched in Accusoft ImageGear

guest · Dec 3, 2019

Code Execution Vulnerabilities Patched in Accusoft ImageGear
December 3, 2019
https://www.securityweek.com/code-execution-vulnerabilities-patched-accusoft-imagegear

The library, which is used by developers to build custom imaging applications, contains the entire document imaging lifecycle, and includes support for .NET, Java and C/C++.

Cisco Talos’ security researchers have discovered a series of vulnerabilities in the development toolkit that could allow an attacker to execute code remotely, via malformed files.
In order to exploit these vulnerabilities, an attacker would need to convince the victim to open the malformed file using a vulnerable version of the application.

The security flaws were discovered in Accusoft ImageGear version 19.3.0. The issues are considered Critical with a CVSS score of 9.8.
Cisco Talos reported the vulnerabilities to Accusoft at the end of July. A patch was released last week.
Click to expand...

Cisco Talos: Vulnerability Spotlight: Accusoft ImageGear PNG IHDR width code execution vulnerability

guest · Feb 10, 2020

Vulnerability Spotlight: Accusoft ImageGear library code execution vulnerabilities
February 10, 2020
https://blog.talosintelligence.com/2020/02/accusoft-imagegear-code-execution-feb-2020.html

Cisco Talos recently discovered three code execution vulnerabilities in Accusoft ImageGear. The ImageGear library is a document-imaging developer toolkit to assist users with image conversion, creation, editing and more. There are vulnerabilities in certain functions of ImageGear that could allow an attacker to execute code on the victim machine.

In accordance with our coordinated disclosure policy, Cisco Talos worked with Accusoft to ensure that these issues are resolved and that an update (link will generate a download) is available for affected customers.
Versions tested
Talos tested and confirmed that version 19.5.0 of Accusoft ImageGear is affected by these vulnerabilities.
Click to expand...

Log in or Sign up

Code Execution Vulnerabilities Patched in Accusoft ImageGear

guest Guest

guest Guest

Log in or Sign up

Code Execution Vulnerabilities Patched in Accusoft ImageGear

guest Guest

guest Guest

Useful Searches