CVE-2020-13572

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.8

Description A heap overflow issue exists in the GIF parser when decoding LZW compressed streams. This can be triggered by a specially crafted malformed file, potentially leading to arbitrary code execution. An attacker can exploit this by providing a malicious file.

Recommendations For Accusoft ImageGear version 19.8, consider avoiding the use of the GIF parser for LZW compressed streams until a patch is available. As a temporary workaround, restrict the handling of malicious or untrusted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.