Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-5997 State: REJECTED Published: 2021-06-11T16:30:38 Last Updated: 2021-06-11T16:30:38 Description: No description available.
CVE ID: CVE-2020-5998 State: REJECTED Published: 2021-06-11T16:30:38 Last Updated: 2021-06-11T16:30:38 Description: No description available.
CVE ID: CVE-2020-5999 State: REJECTED Published: 2021-06-11T16:30:38 Last Updated: 2021-06-11T16:30:38 Description: No description available.
CVE ID: CVE-2020-6000 State: REJECTED Published: 2021-06-11T16:30:38 Last Updated: 2021-06-11T16:30:38 Description: No description available.
CVE ID: CVE-2020-6001 State: REJECTED Published: 2021-06-11T16:30:38 Last Updated: 2021-06-11T16:30:38 Description: No description available.
CVE ID: CVE-2020-6002 State: REJECTED Published: 2021-06-11T16:30:38 Last Updated: 2021-06-11T16:30:38 Description: No description available.
CVE ID: CVE-2020-6003 State: REJECTED Published: 2021-06-11T16:30:39 Last Updated: 2021-06-11T16:30:39 Description: No description available.
CVE ID: CVE-2020-6004 State: REJECTED Published: 2021-06-11T16:30:39 Last Updated: 2021-06-11T16:30:39 Description: No description available.
CVE ID: CVE-2020-6005 State: REJECTED Published: 2021-06-11T16:30:39 Last Updated: 2021-06-11T16:30:39 Description: No description available.
CVE ID: CVE-2020-6006 State: REJECTED Published: 2021-06-11T16:30:39 Last Updated: 2021-06-11T16:30:39 Description: No description available.
CVE ID: CVE-2020-6007 State: PUBLISHED Published: 2020-01-23T21:20:17 Last Updated: 2024-08-04T08:47:40.940Z Vendors: n/a Products: Philips Hue Bridge 2.X Problem Types: CWE-122 Description: Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www2.meethue.com/en-us/support/release-notes/bridge - https://research.checkpoint.com/2020/dont-be-silly-its-only-a-lightbulb/
CVE ID: CVE-2020-6008 State: PUBLISHED Published: 2020-03-31T14:10:19 Last Updated: 2024-08-04T08:47:40.956Z Vendors: n/a Products: LifterLMS Wordpress Plugin Problem Types: CWE-434 Description: LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/lifterlms/#developers
CVE ID: CVE-2020-6009 State: PUBLISHED Published: 2020-04-01T21:02:49 Last Updated: 2024-08-04T08:47:40.965Z Vendors: n/a Products: LearnDash Wordpress Plugin Problem Types: CWE-89 Description: LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://learndash.releasenotes.io/release/YBfaq-version-316
CVE ID: CVE-2020-6010 State: PUBLISHED Published: 2020-04-30T14:38:22 Last Updated: 2024-08-04T08:47:41.008Z Vendors: n/a Products: LearnPress Wordpress Plugin Problem Types: n/a Description: LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/learnpress/#developers - https://plugins.trac.wordpress.org/browser/learnpress/trunk/readme.txt?rev=2288975 - https://research.checkpoint.com/2020/e-learning-platforms-getting-schooled-multiple-vulnerabilities-in-wordpress-most-popular-learning-management-system-plugins/ - http://packetstormsecurity.com/files/163536/
erabilities-in-wordpress-most-popular-learning-management-system-plugins/ - http://packetstormsecurity.com/files/163536/WordPress-LearnPress-SQL-Injection.html
CVE ID: CVE-2020-6012 State: PUBLISHED Published: 2020-08-04T13:35:42 Last Updated: 2024-08-04T08:47:41.017Z Vendors: n/a Products: ZoneAlarm Anti-Ransomware Problem Types: CWE-59 Description: ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an unprivileged user to enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.zonealarm.com/software/extreme-security/release-history - http
Notes: - CVE Program Container: References: - https://www.zonealarm.com/software/extreme-security/release-history - https://www.zonealarm.com/anti-ransomware/release-history - https://danishcyberdefence.dk/blog/zonealarm-check-point
CVE ID: CVE-2020-6013 State: PUBLISHED Published: 2020-07-06T17:54:48 Last Updated: 2024-08-04T08:47:41.024Z Vendors: n/a Products: Check Point ZoneAlarm Problem Types: CWE-65 Description: ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a combination of file permission manipulation and exploitation of Windows CVE-2020-00896 on unpatched systems. Additional Analyst Notes: - CVE Program Container: References: - https://www.zonealarm.com/software/extreme-security/release-history
CVE ID: CVE-2020-6014 State: PUBLISHED Published: 2020-10-30T14:22:05 Last Updated: 2024-08-04T08:47:41.014Z Vendors: n/a Products: Check Point Endpoint Security Client for Windows Problem Types: CWE-114 Description: Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the Domain Name. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate. Additional Analyst Notes: - CVE Program Container: References: - https://suppor
ances may cause the client to terminate. Additional Analyst Notes: - CVE Program Container: References: - https://supportcontent.checkpoint.com/solutions?id=sk168081
CVE ID: CVE-2020-6015 State: PUBLISHED Published: 2020-11-05T19:37:06 Last Updated: 2024-08-04T08:47:40.939Z Vendors: n/a Products: Check Point Endpoint Security for Windows Problem Types: CWE-59 Description: Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage of service log files in non-standard locations. Additional Analyst Notes: - CVE Program Container: References: - https://supportcontent.checkpoint.com/solutions?id=sk170117
CVE ID: CVE-2020-6016 State: PUBLISHED Published: 2020-11-18T14:11:49 Last Updated: 2024-08-04T08:47:41.048Z Vendors: n/a Products: Game Networking Sockets Problem Types: CWE-590 Description: Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveUnreliableSegment(), leading to a Heap-Based Buffer Underflow and a free() of memory not from the heap, resulting in a memory corruption and probably even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ValveSoftware/GameNetworkingSockets/commit/e0c86dcb9139771db3db0cfdb1fb8bef0af19c43 - https://research.c
ps://github.com/ValveSoftware/GameNetworkingSockets/commit/e0c86dcb9139771db3db0cfdb1fb8bef0af19c43 - https://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets/
CVE ID: CVE-2020-6017 State: PUBLISHED Published: 2020-12-03T13:34:00 Last Updated: 2024-08-04T08:47:40.930Z Vendors: n/a Products: Game Networking Sockets Problem Types: CWE-120 Description: Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNP_ReceiveUnreliableSegment() when configured to support plain-text messages, leading to a Heap-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ValveSoftware/GameNetworkingSockets/commit/e0c86dcb9139771db3db0cfdb1fb8bef0af19c43 - https://research.checkpoint
ub.com/ValveSoftware/GameNetworkingSockets/commit/e0c86dcb9139771db3db0cfdb1fb8bef0af19c43 - https://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets/
CVE ID: CVE-2020-6018 State: PUBLISHED Published: 2020-12-02T01:01:38 Last Updated: 2024-08-04T08:47:40.942Z Vendors: n/a Products: Game Networking Sockets Problem Types: CWE-120 Description: Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_DecryptContext::Decrypt() when compiled using libsodium, leading to a Stack-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ValveSoftware/GameNetworkingSockets/commit/bea84e2844b647532a9b7fbc3a6a8989d66e49e3 - https://research.checkpoint.com/2020/game
ftware/GameNetworkingSockets/commit/bea84e2844b647532a9b7fbc3a6a8989d66e49e3 - https://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets/
CVE ID: CVE-2020-6019 State: PUBLISHED Published: 2020-11-13T15:03:31 Last Updated: 2024-08-04T08:47:41.004Z Vendors: n/a Products: Game Networking Sockets Problem Types: CWE-248 Description: Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exception thrown from libprotobuf and resulting in a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ValveSoftware/GameNetworkingSockets/commit/d944a10808891d202bb1d5e1998de6e0423af678 - https://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets/
CVE ID: CVE-2020-6020 State: PUBLISHED Published: 2020-09-24T13:25:32 Last Updated: 2024-08-04T08:47:41.006Z Vendors: n/a Products: ICA Management Portal Problem Types: CWE-20 Description: Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator. Additional Analyst Notes: - CVE Program Container: References: - https://supportcontent.checkpoint.com/solutions?id=sk142952
CVE ID: CVE-2020-6021 State: PUBLISHED Published: 2020-12-03T13:31:22 Last Updated: 2024-08-04T08:47:41.073Z Vendors: n/a Products: Check Point Endpoint Security Client for Windows Problem Types: CWE-427 Description: Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted DLL in the repair folder which will run with the Endpoint client’s privileges. Additional Analyst Notes: - CVE Program Container: References: - https://supportcontent.checkpoint.com/sol
s privileges. Additional Analyst Notes: - CVE Program Container: References: - https://supportcontent.checkpoint.com/solutions?id=sk170512
CVE ID: CVE-2020-6022 State: PUBLISHED Published: 2020-10-27T13:50:50 Last Updated: 2024-08-04T08:47:40.926Z Vendors: n/a Products: Check Point ZoneAlarm Problem Types: CWE-275 Description: Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware. Additional Analyst Notes: - CVE Program Container: References: - https://www.zonealarm.com/software/extreme-security/release-history
CVE ID: CVE-2020-6023 State: PUBLISHED Published: 2020-10-27T13:52:57 Last Updated: 2024-08-04T08:47:40.917Z Vendors: n/a Products: Check Point ZoneAlarm Problem Types: CWE-426 Description: Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware. Additional Analyst Notes: - CVE Program Container: References: - https://www.zonealarm.com/software/extreme-security/release-history
CVE ID: CVE-2020-6024 State: PUBLISHED Published: 2021-01-20T18:17:53 Last Updated: 2024-08-04T08:47:41.027Z Vendors: n/a Products: Check Point SmartConsole Problem Types: CWE-114 Description: Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation due to running executables from a directory with write access to all authenticated users. Additional Analyst Notes: - CVE Program Container: References: - https://supportcontent.checkpoint.com/solutions?id=sk142952
CVE ID: CVE-2020-6058 State: PUBLISHED Published: 2020-02-04T19:19:09 Last Updated: 2024-08-04T08:47:40.934Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: n/a Products: Mini-SNMPD Problem Types: Integer Overflow or Wraparound Description: An exploitable out-of-bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out-of-bounds memory read, which can result in the disclosure of sensitive information and denial of service. To trigger this vulnerability, an attacker needs to send a specially crafted packet to the vulnerable server. Additional Analyst Notes: - CVE Program C
an attacker needs to send a specially crafted packet to the vulnerable server. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0975
CVE ID: CVE-2020-6059 State: PUBLISHED Published: 2020-02-04T19:19:09 Last Updated: 2024-08-04T08:47:40.922Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: n/a Products: Mini-SNMPD Problem Types: Integer Overflow or Wraparound Description: An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out of bounds memory read which can result in sensitive information disclosure and Denial Of Service. In order to trigger this vulnerability, an attacker needs to send a specially crafted packet to the vulnerable server. Additional Analyst Notes: - CVE Program
an attacker needs to send a specially crafted packet to the vulnerable server. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0976 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-0976
CVE ID: CVE-2020-6060 State: PUBLISHED Published: 2020-02-04T19:19:09 Last Updated: 2024-08-04T08:47:40.924Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Mini-SNMPD Problem Types: stack buffer overflow Description: A stack buffer overflow vulnerability exists in the way MiniSNMPD version 1.4 handles multiple connections. A specially timed sequence of SNMP connections can trigger a stack overflow, resulting in a denial of service. To trigger this vulnerability, an attacker needs to simply initiate multiple connections to the server. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_repo
erver. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2019-0977 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-0977
CVE ID: CVE-2020-6061 State: PUBLISHED Published: 2020-02-19T18:27:20 Last Updated: 2024-08-04T08:47:41.018Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: n/a Products: CoTURN Problem Types: heap overflow Description: An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other misbehavior. An attacker needs to send an HTTPS request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQZZ
ner: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQZZPI34LAS3SFNW6Z2ZJ46RKVGEODNA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2NK6FT7AMW5UIZNXDNHKEAYWAUMGSF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OUVZRXW5ZIGWVKOLF3NPXRPP74YX7BUY/ - https://www.debian.org/security/2020/dsa-4711 - https://usn.ubuntu.com/4415-1/ - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0984
CVE ID: CVE-2020-6062 State: PUBLISHED Published: 2020-02-19T18:25:22 Last Updated: 2024-08-04T08:47:40.953Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: CoTURN Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to server crash and denial of service. An attacker needs to send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQZZPI34
References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQZZPI34LAS3SFNW6Z2ZJ46RKVGEODNA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XN2NK6FT7AMW5UIZNXDNHKEAYWAUMGSF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OUVZRXW5ZIGWVKOLF3NPXRPP74YX7BUY/ - https://www.debian.org/security/2020/dsa-4711 - https://usn.ubuntu.com/4415-1/ - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0985
CVE ID: CVE-2020-6063 State: PUBLISHED Published: 2020-02-11T20:54:44 Last Updated: 2024-08-04T08:47:40.984Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: out-of-bounds write Description: An exploitable out-of-bounds write vulnerability exists in the uncompress_scan_line function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintell
ictim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0986
CVE ID: CVE-2020-6064 State: PUBLISHED Published: 2020-02-11T20:50:31 Last Updated: 2024-08-04T08:47:41.021Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: out-of-bounds write Description: An exploitable out-of-bounds write vulnerability exists in the uncompress_scan_line function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted PCX file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintell
ictim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0987
CVE ID: CVE-2020-6065 State: PUBLISHED Published: 2020-02-11T20:50:23 Last Updated: 2024-08-04T08:47:40.963Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: out-of-bounds write Description: An exploitable out-of-bounds write vulnerability exists in the bmp_parsing function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted BMP file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.co
trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0989
CVE ID: CVE-2020-6066 State: PUBLISHED Published: 2020-02-11T20:54:58 Last Updated: 2024-08-04T08:47:40.922Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: out-of-bounds write Description: An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG SOFx parser of the Accusoft ImageGear 19.5.0 library. A specially crafted JPEG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability
nerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0990
CVE ID: CVE-2020-6067 State: PUBLISHED Published: 2020-02-11T20:54:51 Last Updated: 2024-08-04T08:47:41.010Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: out-of-bounds write Description: An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFF tifread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted TIFF file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerabil
vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0991
CVE ID: CVE-2020-6068 State: PUBLISHED Published: 2020-02-14T21:20:29 Last Updated: 2024-08-04T08:47:41.014Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: out of bounds write Description: An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG pngread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerabilit
lnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0992
CVE ID: CVE-2020-6069 State: PUBLISHED Published: 2020-02-11T20:50:41 Last Updated: 2024-08-04T08:47:40.978Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: out-of-bounds write Description: An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG jpegread precision parser of the Accusoft ImageGear 19.5.0 library. A specially crafted JPEG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com
rigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0993