CVE-2002-1363
Fixed in a distro release EPSS 6%
Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.
Products: greg_roelofs libpng
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | libpng | 1.0.12-3.woody.3 |
| Debian 3.0 | libpng3 | 1.2.1-1.1.woody.3 |
| Red Hat Enterprise Linux 3 | libpng | 2:1.2.2-25 |
| Red Hat Enterprise Linux 3 | libpng | 2:1.2.2-24 |
| Red Hat Enterprise Linux 3 | libpng-debuginfo | 2:1.2.2-25 |
| Red Hat Enterprise Linux 3 | libpng-debuginfo | 2:1.2.2-24 |
| Red Hat Enterprise Linux 3 | libpng-devel | 2:1.2.2-24 |
| Red Hat Enterprise Linux 3 | libpng-devel | 2:1.2.2-25 |
| Red Hat Enterprise Linux 3 | libpng10 | 0:1.0.13-14 |
| Red Hat Enterprise Linux 3 | libpng10 | 0:1.0.13-15 |
| Red Hat Enterprise Linux 3 | libpng10-debuginfo | 0:1.0.13-14 |
| Red Hat Enterprise Linux 3 | libpng10-debuginfo | 0:1.0.13-15 |
| Red Hat Enterprise Linux 3 | libpng10-devel | 0:1.0.13-14 |
| Red Hat Enterprise Linux 3 | libpng10-devel | 0:1.0.13-15 |