CVEvulnerability
CVE-2004-0994
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-01-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.
Affected configurations
• zgv xzgv image viewer 0.6
• zgv xzgv image viewer 0.7
• zgv xzgv image viewer 0.8
• zgv zgv image viewer 5.5
• zgv zgv image viewer 5.6
• zgv zgv image viewer 5.7
• zgv zgv image viewer 5.8
• debian debian linux 3.0
References
- http://marc.info/?l=bugtraq&m=110297198402077&w=2 marc.info
- http://rus.members.beeb.net/xzgv-0.8-integer-overflow-fix.diff rus.members.beeb.net
- http://www.debian.org/security/2004/dsa-614 www.debian.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18454 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=110297198402077&w=2 marc.info
- http://rus.members.beeb.net/xzgv-0.8-integer-overflow-fix.diff rus.members.beeb.net
- http://www.debian.org/security/2004/dsa-614 www.debian.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18454 exchange.xforce.ibmcloud.com