CVE-2004-1095: Buffer Overflow
First published: Wed Dec 01 2004(Updated: )
Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be overflowed and small buffers to be allocated, leading to buffer overflows. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| zgv | =0.8 | |
| zgv | =0.6 | |
| zgv image viewer | =5.5 | |
| zgv image viewer | =5.8 | |
| zgv image viewer | =5.7 | |
| zgv | =0.7 | |
| zgv image viewer | =5.6 | |
| Debian Linux | =3.0 | |
| Debian Linux | =3.0 | |
| Debian Linux | =3.0 | |
| Debian Linux | =3.0 | |
| Debian Linux | =3.0 | |
| Debian Linux | =3.0 | |
| Debian Linux | =3.0 | |
| Debian Linux | =3.0 | |
| Debian Linux | =3.0 | |
| Debian Linux | =3.0 | |
| Debian Linux | =3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/11556
- http://www.gentoo.org/security/en/glsa/glsa-200411-12.xml
- http://www.svgalib.org/rus/zgv/
- http://www.svgalib.org/rus/zgv/zgv-5.8-integer-overflow-fix.diff
- http://marc.info/?l=bugtraq&m=109886210702781&w=2
- http://marc.info/?l=bugtraq&m=109898111915661&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17871
Frequently Asked Questions
What is the severity of CVE-2004-1095?
CVE-2004-1095 has a high severity rating due to the potential for remote code execution.
How do I fix CVE-2004-1095?
To fix CVE-2004-1095, update zgv image viewer to the latest version that addresses the vulnerability.
Which versions are affected by CVE-2004-1095?
CVE-2004-1095 affects zgv versions 5.5, 5.6, 5.7, 5.8, and xzgv versions 0.6, 0.7, and 0.8.
What type of vulnerability is CVE-2004-1095?
CVE-2004-1095 is an integer overflow vulnerability that can lead to arbitrary code execution.
Is CVE-2004-1095 specific to certain operating systems?
CVE-2004-1095 primarily affects Debian GNU/Linux systems running vulnerable versions of the zgv image viewer.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/remedy
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/zgv
- canonical/zgv
- version/zgv/0.8
- version/zgv/0.6
- canonical/zgv image viewer
- version/zgv image viewer/5.5
- version/zgv image viewer/5.8
- version/zgv image viewer/5.7
- version/zgv/0.7
- version/zgv image viewer/5.6
- vendor/debian
- canonical/debian linux
- version/debian linux/3.0