Lucene search

K
ubuntucveUbuntu.comUB:CVE-2004-1095
HistoryJan 10, 2005 - 12:00 a.m.

CVE-2004-1095

2005-01-1000:00:00
ubuntu.com
ubuntu.com
13

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.12

Percentile

95.4%

Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c,
(4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c,
(9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote
attackers to execute arbitrary code via certain image headers that cause
calculations to be overflowed and small buffers to be allocated, leading to
buffer overflows. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of
bugs that only partially overlap, despite having the same developer.
Therefore, they should be regarded as distinct.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchzgv< 5.9-1UNKNOWN
ubuntu6.10noarchzgv< 5.9-1UNKNOWN
ubuntu7.04noarchzgv< 5.9-1UNKNOWN

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.12

Percentile

95.4%