CVE-2020-6075

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.5.0

Description The issue is related to an out-of-bounds write vulnerability in the store data buffer function of the igcore19d.dll library. This vulnerability can be exploited by a remote attacker using a specially crafted PNG file, potentially leading to remote code execution. The attacker would need to provide a malformed file to the victim to trigger the issue.

Recommendations For Accusoft ImageGear version 19.5.0, consider avoiding the use of the store data buffer function until a patch is available. As a temporary workaround, restrict the handling of PNG files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.