CVE

Id
9422  
CVE No.
CVE-2004-0994  
Status
Candidate  
Description
Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.  
Phase
Assigned (20041102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63085 9422 CVE-2004-0994 IDEFENSE:20041213 Multiple Vendor xzgv PRF Parsing Integer Overflow Vulnerability  View
63086 9422 CVE-2004-0994 URL:http://marc.info/?l=bugtraq&m=110297198402077&w=2  View
63087 9422 CVE-2004-0994 CONFIRM:http://rus.members.beeb.net/xzgv-0.8-integer-overflow-fix.diff  View
63088 9422 CVE-2004-0994 DEBIAN:DSA-614  View
63089 9422 CVE-2004-0994 URL:http://www.debian.org/security/2004/dsa-614  View
63090 9422 CVE-2004-0994 XF:xzgv-readprffile-bo(18454)  View

Related JVN