NetSight
IP …
medium5.0

CVE-2004-0421

The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that tri…

Impact

The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.

Affected products

VendorProductAffected versions
LibpngLibpng
Versions 1.0.0, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9
OpenpkgOpenpkg
Versions 1.3, 2.0
RedhatLibpng
Versions 1.2.2-16, 1.2.2-20
RedhatEnterprise Linux
Versions 2.1, 3.0
RedhatEnterprise Linux Desktop
Version 3.0
TrustixSecure Linux
Versions 2.0, 2.1

Weakness classification

CWE-125

References