CVE-2004-0421

libpng <1.0.15 - DoS

Title source: llm
STIX 2.1

Description

The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.

References (17)

Core 17
Core References
Mailing List vendor-advisory x_refsource_fedora
http://marc.info/?l=fedora-announce-list&m=108451353608968&w=2
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=108334922320309&w=2
Broken Link vendor-advisory x_refsource_debian
http://www.debian.org/security/2004/dsa-498
Third Party Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2004:040
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22958
Broken Link, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16022
Broken Link vendor-advisory x_refsource_apple
http://lists.apple.com/mhonarc/security-announce/msg00056.html
Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/10244
Mailing List vendor-advisory x_refsource_fedora
http://marc.info/?l=fedora-announce-list&m=108451350029261&w=2
Third Party Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:213
Broken Link, Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2004-180.html
Third Party Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:212
Mailing List vendor-advisory x_refsource_trustix
http://marc.info/?l=bugtraq&m=108335030208523&w=2
Broken Link vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2004-181.html
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22957

Scores

EPSS 0.0331
EPSS Percentile 87.4%

Details

CWE
CWE-125
Status published
Products (26)
libpng/libpng 1.0.0
libpng/libpng 1.0.5
libpng/libpng 1.0.6
libpng/libpng 1.0.7
libpng/libpng 1.0.8
libpng/libpng 1.0.9
libpng/libpng 1.0.10
libpng/libpng 1.0.11
libpng/libpng 1.0.12
libpng/libpng 1.0.13
... and 16 more
Published Aug 18, 2004
Tracked Since Feb 18, 2026