CVE-2004-1095

Multiple integer overflows in 1 readbmp.c, 2 readgif.c, 3 readgif.c, 4 readmrf.c, 5 readpcx.c, 6 readpng.c,7 readpnm.c, 8 readprf.c, 9 readtiff.c, 10 readxbm.c, 11 readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be...

zgv -- exploitable heap overflows

infamous41md reports: zgv uses malloc frequently to allocate memory for storing image data. When calculating how much to allocate, user supplied data from image headers is multiplied and/or added without any checks for arithmetic overflows. We can overflow numerous calculations, and cause small...