CVE-2004-0598
Fixed in a distro release EPSS 6%
The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference.
Products: greg_roelofs libpng
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | libpng | 1.0.12-3.woody.7 |
| Debian 3.0 | libpng3 | 1.2.1-1.1.woody.7 |
| Red Hat Enterprise Linux 3 | libpng | 2:1.2.2-25 |
| Red Hat Enterprise Linux 3 | libpng-debuginfo | 2:1.2.2-25 |
| Red Hat Enterprise Linux 3 | libpng-devel | 2:1.2.2-25 |
| Red Hat Enterprise Linux 3 | libpng10 | 0:1.0.13-15 |
| Red Hat Enterprise Linux 3 | libpng10-debuginfo | 0:1.0.13-15 |
| Red Hat Enterprise Linux 3 | libpng10-devel | 0:1.0.13-15 |