3 matches found
CVE-2005-0665
The CVE-2005-0665 entry describes a format-string vulnerability in xv (pre-3.10a) that lets remote attackers execute arbitrary code via crafted filenames. Root cause: processing of format specifiers in filenames. Impact: arbitrary code execution on affected xv deployments. Remediation: upgrade to...
CVE-2004-1726
The CVE-2004-1726 vulnerability affects XV, with multiple integer overflows in xviris.c, xvpcx.c, and xvpm.c that can be triggered by a crafted image file, causing a heap-based buffer overflow and remote code execution as described in multiple sources (NVD/SUSE/CVE records). The provided document...
CVE-2004-1725
The CVE-2004-1725 entry describes a stack-based buffer overflow in xvbmp.c within XV that allows remote attackers to execute arbitrary code via a crafted image file. Connected sources confirm the affected component is XV and specify xvbmp.c as the vulnerable module, with the vulnerability enablin...