Vulnerability in Greg Roelofs Libpng
CVE-2004-0599
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.
EPSS: 0.062 (93.1th percentile) — read the EPSS interpretation.
Affected products
- Greg_roelofs Libpng
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_TRUSTIX, Vendor Advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_GENTOO, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory)