Every CVE Search/ Get API key

CVE-2004-0994

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary...

10.0 HighFix available

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

Exploit likelihood

5.15%Down 1.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

Record
CVE-2004-0994
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

Record
CVE-2004-0994
Updated
2026-11-02
EUVDEUVD-2004-0992 No score

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

Record
EUVD-2004-0992
Updated
2026-11-03
GitHub AdvisoriesGHSA-74wh-7854-hjwj No score

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary...

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

Record
GHSA-74wh-7854-hjwj
Updated
2026-11-02
OSV No score

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

Record
CVE-2004-0994
Updated
2026-11-02
OSVDEBIAN-CVE-2004-0994 No score

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

Record
DEBIAN-CVE-2004-0994
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xzgv
Debian:12
before 0.8-3
0.8-3
xzgv
Debian:13
before 0.8-3
0.8-3
xzgv
Debian:3.0
before 0.7-6woody2
0.7-6woody2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-0994 is a high vulnerability (CVSS 10.0) in Debian Linux, published December 15, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.15%, the 92nd percentile. Fixed in xzgv 0.8-3.

References

MoveEnter Open