Vulnerability in Greg_roelofs Libpng
CVE-2004-0597
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length…
EPSS: 0.825 (99.6th percentile) — read the EPSS interpretation.
Affected products
- Greg_roelofs Libpng
- Microsoft Msn_messenger — versions 6.1, 6.2
- Microsoft Windows_98se
- Microsoft Windows_me
- Microsoft Windows_media_player — versions 9
- Microsoft Windows_messenger — versions 5.0
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (vendor-advisory, Patch, x_refsource_TRUSTIX, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_GENTOO, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory)
Frequently asked questions
- What is CVE-2004-0597?
- CVE-2004-0597 is a vulnerability in Greg_roelofs Libpng. Published 2004-11-23.
- Is CVE-2004-0597 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.