CVE:CVE-2004-0994
CNNVD:CNNVD-200501-192
xzgv是一款开源的X界面下的图片浏览器软件。
Xzgv 0.8版本中存在多个整数溢出漏洞。
远程攻击者可通过包含超大的width/height值图片文件，触发溢出。如read_prf_file功能模块中readprf.c就可以被攻击者利用，从而可能执行任意代码。
solution:Upgrade zgv xzgv_image_viewer to a higher version than 0.6,0.7,0.8,and avoid the version 0.6,0.7,0.8; Upgrade zgv zgv_image_viewer to a higher version than 5.5,5.6,5.7,5.8,and avoid the version 5.5,5.6,5.7,5.8; Upgrade debian debian_linux to a higher version than 3.0,and avoid the version 3.0