CVE Vulnerabilities

CVE-2004-1095

Published: Jan 10, 2005 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be overflowed and small buffers to be allocated, leading to buffer overflows. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

Affected Software

Name Vendor Start Version End Version
Xzgv_image_viewer Zgv 0.6 (including) 0.6 (including)
Xzgv_image_viewer Zgv 0.7 (including) 0.7 (including)
Xzgv_image_viewer Zgv 0.8 (including) 0.8 (including)
Zgv_image_viewer Zgv 5.5 (including) 5.5 (including)
Zgv_image_viewer Zgv 5.6 (including) 5.6 (including)
Zgv_image_viewer Zgv 5.7 (including) 5.7 (including)
Zgv_image_viewer Zgv 5.8 (including) 5.8 (including)
Zgv Ubuntu dapper *
Zgv Ubuntu devel *
Zgv Ubuntu edgy *
Zgv Ubuntu feisty *

References