T
he Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
20 Nov 2024, 23:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lists.apple.com/mhonarc/security-announce/msg00056.html - Broken Link | |
| References | () http://marc.info/?l=bugtraq&m=108334922320309&w=2 - Mailing List | |
| References | () http://marc.info/?l=bugtraq&m=108335030208523&w=2 - Mailing List | |
| References | () http://marc.info/?l=fedora-announce-list&m=108451350029261&w=2 - Mailing List | |
| References | () http://marc.info/?l=fedora-announce-list&m=108451353608968&w=2 - Mailing List | |
| References | () http://secunia.com/advisories/22957 - Broken Link | |
| References | () http://secunia.com/advisories/22958 - Broken Link | |
| References | () http://www.debian.org/security/2004/dsa-498 - Broken Link | |
| References | () http://www.mandriva.com/security/advisories?name=MDKSA-2004:040 - Third Party Advisory | |
| References | () http://www.mandriva.com/security/advisories?name=MDKSA-2006:212 - Third Party Advisory | |
| References | () http://www.mandriva.com/security/advisories?name=MDKSA-2006:213 - Third Party Advisory | |
| References | () http://www.redhat.com/support/errata/RHSA-2004-180.html - Broken Link, Patch, Vendor Advisory | |
| References | () http://www.redhat.com/support/errata/RHSA-2004-181.html - Broken Link | |
| References | () http://www.securityfocus.com/bid/10244 - Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/16022 - Broken Link, VDB Entry | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11710 - Broken Link | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A971 - Broken Link |
Information
Published : 2004-08-18 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2004-0421
Mitre link : CVE-2004-0421
CVE.ORG link : CVE-2004-0421
JSON object : View
Products Affected
CWE
CWE-125
Out-of-bounds Read