vulnwire
10.0crit

CVE-2004-10951 exploit

Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) r…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
9.4%
percentile 95%
Public exploits
1
Exploit-DB

Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be overflowed and small buffers to be allocated, leading to buffer overflows. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

Exploit prediction (EPSS)

9.38% probability of exploitation in the next 30 days, higher than 95% of all scored CVEs.

Exploits and detections

  • EDB-609 zgv 5.5 - Multiple Arbitrary Code Executions · remote · 2004-10-28

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • exchange.xforce.ibmcloud.com /vulnerabilities/17871 · vdb-entry, x_refsource_XF, x_transferred
  • svgalib.org /rus/zgv/ · x_refsource_CONFIRM, x_transferred
  • svgalib.org /rus/zgv/zgv-5.8-integer-overflow-fix.diff · x_refsource_CONFIRM, x_transferred
  • gentoo.org /security/en/glsa/glsa-200411-12.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • marc.info /?l=bugtraq&m=109898111915661&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/11556 · vdb-entry, x_refsource_BID, x_transferred
  • marc.info /?l=bugtraq&m=109886210702781&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.