Vulnerabilities (CVE)

Filtered by vendor Accusoft Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-21795 1 Accusoft 1 Imagegear 2022-07-29 7.5 HIGH 9.8 CRITICAL
A heap-based buffer overflow vulnerability exists in the PSD read_icc_icCurve_data functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to an integer overflow that, in turn, leads to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2020-6151 1 Accusoft 1 Imagegear 2022-05-12 7.5 HIGH 9.8 CRITICAL
A memory corruption vulnerability exists in the TIFF handle_COMPRESSION_PACKBITS functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause a memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2021-21833 1 Accusoft 1 Imagegear 2022-04-28 7.5 HIGH 9.8 CRITICAL
An improper array index validation vulnerability exists in the TIF IP_planar_raster_unpack functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2012-5190 1 Accusoft 1 Prizm Content Connect 2020-01-29 7.5 HIGH 9.8 CRITICAL
Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability
CVE-2018-15805 1 Accusoft 1 Prizmdoc 2019-01-03 6.4 MEDIUM 9.1 CRITICAL
Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumption).