CVE-2004-0994

Publication date 10 January 2005

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
xzgv 7.04 feisty
Fixed 0.8-5
6.10 edgy
Fixed 0.8-5
6.06 LTS dapper
Fixed 0.8-5