CVE-2020-6094

Katalog CVE

CVSS 8.8 · High EPSS 3,7%

Kerentanan Integer Overflow or Wraparound pada accusoft imagegear. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

An exploitable code execution vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library of Accusoft ImageGear 19.4, 19.5 and 19.6. A specially crafted TIFF file can cause an out-of-bounds write, resulting in remote code execution. An attacker can provide a malicious file to trigger this vulnerability.

Rincian

Terbit di NVD

6 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound
CWE-787: Out-of-bounds Write

EPSS (30 hari)

3,7% peluang dieksploitasi; lebih tinggi dari 89,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1017 exploit · deskripsi teknis · advisory pihak ketiga