Approved changes feed: RSS · Atom

cpe:2.3:a:zgv:zgv_image_viewer:5.8:*:*:*:*:*:*:*

part: a version: 5.8 update: *

VendorZgv (65448309-7d9e-5d22-9ba2-41c58064903d)
ProductZgv Image Viewer (b553ecea-87af-527a-9a48-6cc5c3110e79)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1095 vulnerable 2026-06-08 04:47:52.931182 Details available
Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be overflowed and small buffers to be allocated, leading to buffer overflows. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0999 vulnerable 2026-06-08 04:47:52.251949 Details available
zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted multiple-image (animated) GIF images.
Published: 2004-12-31T05:00:00.000Z
Updated: 2024-08-08T00:39:00.393Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0994 vulnerable 2026-06-08 04:47:52.233545 Details available
Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.
Published: 2004-12-15T05:00:00.000Z
Updated: 2024-08-08T00:39:00.531Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.