CVE-2004-0421
Fixed in a distro release EPSS 4%
The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.
Products: libpng, openpkg, redhat libpng, redhat enterprise_linux, redhat enterprise_linux_desktop, trustix secure_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | libpng | 1.0.12-3.woody.5 |
| Debian 3.0 | libpng3 | 1.2.1-1.1.woody.5 |
| Red Hat Enterprise Linux 3 | libpng | 2:1.2.2-21 |
| Red Hat Enterprise Linux 3 | libpng-debuginfo | 2:1.2.2-21 |
| Red Hat Enterprise Linux 3 | libpng-devel | 2:1.2.2-21 |
| Red Hat Enterprise Linux 3 | libpng10 | 0:1.0.13-12 |
| Red Hat Enterprise Linux 3 | libpng10-debuginfo | 0:1.0.13-12 |
| Red Hat Enterprise Linux 3 | libpng10-devel | 0:1.0.13-12 |