CVE

Id
9523  
CVE No.
CVE-2004-1095  
Status
Candidate  
Description
Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be overflowed and small buffers to be allocated, leading to buffer overflows. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.  
Phase
Assigned (20041130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
64443 9523 CVE-2004-1095 BUGTRAQ:20041026 zgv image viewing heap overflows  View
64444 9523 CVE-2004-1095 URL:http://marc.info/?l=bugtraq&m=109886210702781&w=2  View
64445 9523 CVE-2004-1095 BUGTRAQ:20041028 Re: zgv image viewing heap overflows  View
64446 9523 CVE-2004-1095 URL:http://marc.info/?l=bugtraq&m=109898111915661&w=2  View
64447 9523 CVE-2004-1095 GENTOO:GLSA-200411-12  View
64448 9523 CVE-2004-1095 URL:http://www.gentoo.org/security/en/glsa/glsa-200411-12.xml  View
64449 9523 CVE-2004-1095 CONFIRM:http://www.svgalib.org/rus/zgv/  View
64450 9523 CVE-2004-1095 CONFIRM:http://www.svgalib.org/rus/zgv/zgv-5.8-integer-overflow-fix.diff  View
64451 9523 CVE-2004-1095 XF:zgv-image-header-bo(17871)  View
64452 9523 CVE-2004-1095 URL:http://xforce.iss.net/xforce/xfdb/17871  View
64453 9523 CVE-2004-1095 BID:11556  View

Related JVN