ZGV Image Viewer Animated GIF Remote Memory Corruption Vulnerability
BID:11915
Info
ZGV Image Viewer Animated GIF Remote Memory Corruption Vulnerability
| Bugtraq ID: | 11915 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2004-0999 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 14 2004 12:00AM |
| Updated: | Jul 12 2009 09:26AM |
| Credit: | Mikulas Patocka is credited with the discovery of this vulnerability. |
| Vulnerable: |
zgv Image Viewer 5.8 zgv Image Viewer 5.7 zgv Image Viewer 5.6 zgv Image Viewer 5.5 |
| Not Vulnerable: | |
Discussion
ZGV Image Viewer Animated GIF Remote Memory Corruption Vulnerability
A remote memory corruption vulnerability affects the animated GIF functionality of zgv. It should be noted that although it is likely that xzgv is also vulnerable to this issue, this has not been confirmed. The underlying issue causing this vulnerability is unknown, although it is likely due to a failure of the application to handle malformed image files.
The full impact of this issue is currently unknown, however this issue can be leveraged to cause the affected application to crash. It is possible, however unconfirmed, that this issue may be leveraged to execute arbitrary code.
A remote memory corruption vulnerability affects the animated GIF functionality of zgv. It should be noted that although it is likely that xzgv is also vulnerable to this issue, this has not been confirmed. The underlying issue causing this vulnerability is unknown, although it is likely due to a failure of the application to handle malformed image files.
The full impact of this issue is currently unknown, however this issue can be leveraged to cause the affected application to crash. It is possible, however unconfirmed, that this issue may be leveraged to execute arbitrary code.
Exploit / POC
ZGV Image Viewer Animated GIF Remote Memory Corruption Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
ZGV Image Viewer Animated GIF Remote Memory Corruption Vulnerability
Solution:
Debian linux has made an advisory available (DSA 608-1) dealing with this issue. Please see the referenced advisory for more information.
zgv Image Viewer 5.5
Solution:
Debian linux has made an advisory available (DSA 608-1) dealing with this issue. Please see the referenced advisory for more information.
zgv Image Viewer 5.5
-
Debian zgv_5.5-3woody2_i386.deb
http://security.debian.org/pool/updates/main/z/zgv/zgv_5.5-3woody2_i38 6.deb
References
ZGV Image Viewer Animated GIF Remote Memory Corruption Vulnerability
References:
References:
- zgv Home Page (zgv)