CVE-2020-6094

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear versions 19.4 through 19.6

Description The issue is related to an exploitable code execution problem in the TIFF fillinraster function of the igcore19d.dll library, which can be triggered by a specially crafted TIFF file. This can cause an out-of-bounds write, resulting in remote code execution. An attacker can provide a malicious file to exploit this issue.

Recommendations For Accusoft ImageGear versions 19.4 through 19.6, consider restricting access to the TIFF fillinraster function of the igcore19d.dll library until a patch is available. As a temporary workaround, avoid using the igcore19d.dll library for processing TIFF files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.