MitreCVE-2004-0994CVE-2004-0994
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
95.4%
Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zgv | xzgv_image_viewer | 0.6 | cpe:2.3:a:zgv:xzgv_image_viewer:0.6:*:*:*:*:*:*:* |
| zgv | xzgv_image_viewer | 0.7 | cpe:2.3:a:zgv:xzgv_image_viewer:0.7:*:*:*:*:*:*:* |
| zgv | xzgv_image_viewer | 0.8 | cpe:2.3:a:zgv:xzgv_image_viewer:0.8:*:*:*:*:*:*:* |
| zgv | zgv_image_viewer | 5.5 | cpe:2.3:a:zgv:zgv_image_viewer:5.5:*:*:*:*:*:*:* |
| zgv | zgv_image_viewer | 5.6 | cpe:2.3:a:zgv:zgv_image_viewer:5.6:*:*:*:*:*:*:* |
| zgv | zgv_image_viewer | 5.7 | cpe:2.3:a:zgv:zgv_image_viewer:5.7:*:*:*:*:*:*:* |
| zgv | zgv_image_viewer | 5.8 | cpe:2.3:a:zgv:zgv_image_viewer:5.8:*:*:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
95.4%