CVE-2004-0994

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-01-10 · updated 2026-06-16

Description

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

Affected products

Debian Linux: 3.0
Zgv Xzgv Image Viewer: 0.6, 0.7, 0.8
Zgv Image Viewer: 5.5, 5.6, 5.7, 5.8

References

http://marc.info/?l=bugtraq&m=110297198402077&w=2
http://rus.members.beeb.net/xzgv-0.8-integer-overflow-fix.diff
http://www.debian.org/security/2004/dsa-614
https://exchange.xforce.ibmcloud.com/vulnerabilities/18454
http://marc.info/?l=bugtraq&m=110297198402077&w=2
http://rus.members.beeb.net/xzgv-0.8-integer-overflow-fix.diff
http://www.debian.org/security/2004/dsa-614
https://exchange.xforce.ibmcloud.com/vulnerabilities/18454

Get alerted when CVE-2004-0994 or the next vulnerability affects your stack