CVE-2006-1060

Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG image with more than…

published April 11, 2006

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG image with more than 3 output components, such as a CMYK or YCCK color space, which causes less memory to be allocated than required.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04169 · 90.9th percentile
Published
2006-04-11T10:00Z
EPSS history
Timeline
  • 11 APR 10:00Z
    Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG image with more than…
    cvelistv5