Total vulnerabilities in the database
Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.
| Software | From | Fixed in |
|---|---|---|
| zgv / xzgv_image_viewer | 0.8 | 0.8.x |
| zgv / xzgv_image_viewer | 0.6 | 0.6.x |
| zgv / zgv_image_viewer | 5.5 | 5.5.x |
| zgv / zgv_image_viewer | 5.8 | 5.8.x |
| zgv / zgv_image_viewer | 5.7 | 5.7.x |
| zgv / xzgv_image_viewer | 0.7 | 0.7.x |
| zgv / zgv_image_viewer | 5.6 | 5.6.x |
| debian / debian_linux | 3.0 | 3.0.x |