VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 10, 2005· Updated Apr 16, 2026

CVE-2004-0994

CVE-2004-0994

Description

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

Affected products

18
  • Zgv/Xzgv Image Viewer3 versions
    cpe:2.3:a:zgv:xzgv_image_viewer:0.6:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:zgv:xzgv_image_viewer:0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:zgv:xzgv_image_viewer:0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:zgv:xzgv_image_viewer:0.8:*:*:*:*:*:*:*
  • Zgv/Zgv Image Viewer4 versions
    cpe:2.3:a:zgv:zgv_image_viewer:5.5:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:zgv:zgv_image_viewer:5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:zgv:zgv_image_viewer:5.6:*:*:*:*:*:*:*
    • cpe:2.3:a:zgv:zgv_image_viewer:5.7:*:*:*:*:*:*:*
    • cpe:2.3:a:zgv:zgv_image_viewer:5.8:*:*:*:*:*:*:*
  • Debian/Debian Linux11 versions
    cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*+ 10 more
    • cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.