CVE-2004-0599
Fixed in a distro release EPSS 6%
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.
Products: greg_roelofs libpng
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | libpng | 1.0.12-3.woody.7 |
| Debian 3.0 | libpng | 1.0.12-3.woody.9 |
| Debian 3.0 | libpng3 | 1.2.1-1.1.woody.7 |
| Debian 3.0 | libpng3 | 1.2.1-1.1.woody.9 |
| Red Hat Enterprise Linux 3 | libpng | 2:1.2.2-25 |
| Red Hat Enterprise Linux 3 | libpng-debuginfo | 2:1.2.2-25 |
| Red Hat Enterprise Linux 3 | libpng-devel | 2:1.2.2-25 |
| Red Hat Enterprise Linux 3 | libpng10 | 0:1.0.13-15 |
| Red Hat Enterprise Linux 3 | libpng10-debuginfo | 0:1.0.13-15 |
| Red Hat Enterprise Linux 3 | libpng10-devel | 0:1.0.13-15 |