CVE-2004-1095

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 9.4%

from disclosure to weapon0 days

Published on NVDDec 1

1st PoCOct 28

exploitation probability

9.4%top 5% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be overflowed and small buffers to be allocated, leading to buffer overflows. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/609

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://marc.info/?l=bugtraq&m=109886210702781&w=2 http://marc.info/?l=bugtraq&m=109898111915661&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/17871 http://www.gentoo.org/security/en/glsa/glsa-200411-12.xml http://www.securityfocus.com/bid/11556 http://www.svgalib.org/rus/zgv/http://www.svgalib.org/rus/zgv/zgv-5.8-integer-overflow-fix.diff