Description
Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow.
References
- xv-image-bo(17053) vdb-entry
- 10985 vdb-entry
- 20040820 XV multiple buffer overflows, exploit included mailing-list