PatchTheCVE: john bradleyhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2005-0665: Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format sthttps://patchthecve.com/cve/CVE-2005-0665.htmlhttps://patchthecve.com/cve/CVE-2005-0665.htmlTue, 16 Jun 2026 22:11:32 +0000MEDIUM 5.1: Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename.CVE-2004-1725: Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted ihttps://patchthecve.com/cve/CVE-2004-1725.htmlhttps://patchthecve.com/cve/CVE-2004-1725.htmlTue, 16 Jun 2026 22:08:16 +0000HIGH 7.5: Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file.CVE-2004-1726: Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote attackers to executhttps://patchthecve.com/cve/CVE-2004-1726.htmlhttps://patchthecve.com/cve/CVE-2004-1726.htmlTue, 16 Jun 2026 22:08:16 +0000HIGH 7.5: Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow.