Lucene search
+L

3 matches found

CVE
CVE
added 2005/03/07 5:00 a.m.66 views

CVE-2005-0665

The CVE-2005-0665 entry describes a format-string vulnerability in xv (pre-3.10a) that lets remote attackers execute arbitrary code via crafted filenames. Root cause: processing of format specifiers in filenames. Impact: arbitrary code execution on affected xv deployments. Remediation: upgrade to...

5.1CVSS7.4AI score0.01926EPSS
Save
CVE
CVE
added 2005/02/26 5:00 a.m.52 views

CVE-2004-1726

The CVE-2004-1726 vulnerability affects XV, with multiple integer overflows in xviris.c, xvpcx.c, and xvpm.c that can be triggered by a crafted image file, causing a heap-based buffer overflow and remote code execution as described in multiple sources (NVD/SUSE/CVE records). The provided document...

7.5CVSS7.7AI score0.03809EPSS
Save
CVE
CVE
added 2005/02/26 5:00 a.m.50 views

CVE-2004-1725

The CVE-2004-1725 entry describes a stack-based buffer overflow in xvbmp.c within XV that allows remote attackers to execute arbitrary code via a crafted image file. Connected sources confirm the affected component is XV and specify xvbmp.c as the vulnerable module, with the vulnerability enablin...

7.5CVSS8AI score0.03809EPSS
Save