Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG image with more than 3 output components, such as a CMYK or YCCK color space, which causes less memory to be allocated than required.

Andrea Barisani discovered that xzgv, a picture viewer for X with a thumbnail-based selector, attempts to decode JPEG images within the CMYK/YCCK colour space incorrectly, which could lead to the execution of arbitrary code.

Andrea Barisani discovered that zgv, an svgalib graphics viewer, attempts to decode JPEG images within the CMYK/YCCK colour space incorrectly, which could lead to the execution of arbitrary code.

Gentoo reports :

Andrea Barisani of Gentoo Linux discovered xzgv and zgv allocate insufficient memory when rendering images with more than 3 output components, such as images using the YCCK or CMYK colour space. When xzgv or zgv attempt to render the image, data from the image overruns a heap allocated buffer.

An attacker may be able to construct a malicious image that executes arbitrary code with the permissions of the xzgv or zgv user when attempting to render the image.

The remote host is affected by the vulnerability described in GLSA-200604-10 (zgv, xzgv: Heap overflow)

    Andrea Barisani of Gentoo Linux discovered xzgv and zgv allocate     insufficient memory when rendering images with more than 3 output     components, such as images using the YCCK or CMYK colour space. When     xzgv or zgv attempt to render the image, data from the image overruns a     heap allocated buffer.
  Impact :

    An attacker may be able to construct a malicious image that executes     arbitrary code with the permissions of the xzgv or zgv user when     attempting to render the image.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
22580	Debian DSA-1038-1 : xzgv - programming error	Nessus	Debian Local Security Checks	high
22579	Debian DSA-1037-1 : zgv - programming error	Nessus	Debian Local Security Checks	high
22518	FreeBSD : zgv, xzgv -- heap overflow vulnerability (a813a219-d2d4-11da-a672-000e0c2e438a)	Nessus	FreeBSD Local Security Checks	high
21256	GLSA-200604-10 : zgv, xzgv: Heap overflow	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2006-1060

high

Tenable Plugins

high

high

high

high