CVE-2004-0421
Medium
Description
The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.
SeverityMedium
CVSS5.0
Exploit probability91. percentile4.1%
Product
Libpng
PublishedAug 18, 2004
First seenAug 18, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libpng libpng | 1.0.0, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5 | — |
| openpkg openpkg | 1.3, 2.0 | — |
| redhat libpng | 1.2.2-16, 1.2.2-20 | — |
| redhat enterprise_linux | 2.1, 3.0 | — |
| redhat enterprise_linux_desktop | 3.0 | — |
| trustix secure_linux | 2.0, 2.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.