NetSight
IP …
critical10.0Public exploit code

CVE-2004-0597

Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.

Affected products

VendorProductAffected versions
Greg RoelofsLibpng
through 1.2.5
MicrosoftMsn Messenger
Versions 6.1, 6.2
MicrosoftWindows Media Player
Version 9
MicrosoftWindows Messenger
Version 5.0
MicrosoftWindows 98se
All versions
MicrosoftWindows Me
All versions

References