CVE-2004-1095
CVE-2004-1095 is a critical-severity vulnerability in Zgv Xzgv Image Viewer with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 9% (95th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Zgv Xzgv Image Viewer
- Published:
- Last modified:
Description
Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be overflowed and small buffers to be allocated, leading to buffer overflows. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.
Frequently asked questions
- What is CVE-2004-1095?
- Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be overflowed and small buffers to be allocated, leading to buffer overflows. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.
- How severe is CVE-2004-1095?
- CVE-2004-1095 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-2004-1095 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 9% (95th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2004-1095?
- CVE-2004-1095 primarily affects Zgv Xzgv Image Viewer. In total, 18 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2004-1095?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2004-1095 published?
- CVE-2004-1095 was published on 2005-01-10 and last updated on 2026-06-16.
References
- http://marc.info/?l=bugtraq&m=109886210702781&w=2
- http://marc.info/?l=bugtraq&m=109898111915661&w=2
- http://www.gentoo.org/security/en/glsa/glsa-200411-12.xml
- http://www.securityfocus.com/bid/11556
- http://www.svgalib.org/rus/zgv/
- http://www.svgalib.org/rus/zgv/zgv-5.8-integer-overflow-fix.diff
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17871
Affected products (18)
- cpe:2.3:a:zgv:xzgv_image_viewer:0.6:*:*:*:*:*:*:*
- cpe:2.3:a:zgv:xzgv_image_viewer:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:zgv:xzgv_image_viewer:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:zgv:zgv_image_viewer:5.5:*:*:*:*:*:*:*
- cpe:2.3:a:zgv:zgv_image_viewer:5.6:*:*:*:*:*:*:*
- cpe:2.3:a:zgv:zgv_image_viewer:5.7:*:*:*:*:*:*:*
- cpe:2.3:a:zgv:zgv_image_viewer:5.8:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*
More vulnerabilities in Zgv Xzgv Image Viewer
- CVE-2004-0994 — Critical (CVSS 10.0): Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with…