CVE-2020-6068 : Security Advisory and Response

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG pngread parser of the Accusoft ImageGear 19.5.0 library, allowing remote code execution.

Understanding CVE-2020-6068

This CVE involves a critical vulnerability in the Accusoft ImageGear 19.5.0 library that can be exploited for remote code execution.

What is CVE-2020-6068?

The vulnerability in the Accusoft ImageGear 19.5.0 library allows an attacker to trigger an out-of-bounds write by providing a specially crafted PNG file, leading to remote code execution.

The Impact of CVE-2020-6068

The CVSS base score of 9.8 indicates a critical severity level with high impacts on confidentiality, integrity, and availability of affected systems.

Technical Details of CVE-2020-6068

This section provides detailed technical information about the vulnerability.

Vulnerability Description

The vulnerability is an out-of-bounds write issue in the igcore19d.dll PNG pngread parser of Accusoft ImageGear 19.5.0, enabling attackers to execute remote code.

Affected Systems and Versions

Product: Accusoft
Version: Accusoft ImageGear 19.5.0

Exploitation Mechanism

Attack Complexity: Low
Attack Vector: Network
Privileges Required: None
User Interaction: None
Scope: Unchanged
Exploitation can occur by providing a malformed PNG file to the victim.

Mitigation and Prevention

Protect systems from CVE-2020-6068 with the following measures.

Immediate Steps to Take

Apply vendor patches promptly.
Implement network segmentation to limit exposure.
Monitor network traffic for signs of exploitation.

Long-Term Security Practices

Regularly update software and security patches.
Conduct security training to educate users on file safety.

Patching and Updates

Stay informed about security updates from Accusoft.