zgv: Multiple buffer overflows

zgv: Multiple buffer overflows zgv contains multiple buffer overflows that can potentially lead to the execution of arbitrary code. zgv November 07, 2004 May 22, 2006: 02 69150 remote 5.8 5.8

zgv is a console image viewer based on svgalib.

Multiple arithmetic overflows have been detected in the image processing code of zgv.

An attacker could entice a user to open a specially-crafted image file, potentially resulting in execution of arbitrary code with the rights of the user running zgv.

There is no known workaround at this time.

All zgv users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=media-gfx/zgv-5.8"

BugTraq Advisory CVE-2004-1095 lewk lewk lewk