Vulnerability in Greg Roelofs Libpng
CVE-2004-0597
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.819 (99.6th percentile), scored .
High probability of exploitation in the next 30 days — patch promptly. 100th percentile — 99.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.825 · newest: 0.819 · change: -0.007
Affected products
- Greg Roelofs Libpng
- Microsoft Msn Messenger — versions 6.1, 6.2
- Microsoft Windows 98se
- Microsoft Windows Me
- Microsoft Windows Media Player — versions 9
- Microsoft Windows Messenger — versions 5.0
Public proof-of-concept exploits
References
- www.trustix.net/errata/2004/0040/ (vendor-advisory, Patch, Vendor Advisory)
- sunsolve.sun.com/search/document.do (vendor-advisory)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:2274 (signature, vdb-entry)
- www.mozilla.org/projects/security/known-vulnerabilities.html
- www.redhat.com/support/errata/RHSA-2004-421.html (vendor-advisory, Vendor Advisory)
- www.redhat.com/support/errata/RHSA-2004-402.html (vendor-advisory)
- www.gentoo.org/security/en/glsa/glsa-200408-22.xml (vendor-advisory, Patch, Vendor Advisory)
- secunia.com/advisories/22958 (third-party-advisory)
- sunsolve.sun.com/search/document.do
- marc.info/ (vendor-advisory)
Frequently asked questions
- What is CVE-2004-0597?
- CVE-2004-0597 is a vulnerability in Greg Roelofs Libpng. Published 2004-11-23.
- Is CVE-2004-0597 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.