CVE-2004-1095

CVE-2004-1095 describes multiple integer overflow vulnerabilities in zgv 5.8, specifically within various image parsing functions (e.g., readbmp.c, readgif.c, readpng.c). These flaws allow remote attackers to execute arbitrary code by crafting malicious image headers that trigger integer overflows, leading to small buffer allocations and subsequent buffer overflows. This vulnerability carries a critical CVSS score of 10.0, indicating a network-based attack with low complexity and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, an exploit (EDB-609) is publicly available on ExploitDB, and the CVE has garnered significant community discussion with 10 mentions.