CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
95.5%
Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.
Vendor | Product | Version | CPE |
---|---|---|---|
greg_roelofs | libpng | 1.0.5 | cpe:2.3:a:greg_roelofs:libpng:1.0.5:*:*:*:*:*:*:* |
greg_roelofs | libpng | 1.0.6 | cpe:2.3:a:greg_roelofs:libpng:1.0.6:*:*:*:*:*:*:* |
greg_roelofs | libpng | 1.0.7 | cpe:2.3:a:greg_roelofs:libpng:1.0.7:*:*:*:*:*:*:* |
greg_roelofs | libpng | 1.0.8 | cpe:2.3:a:greg_roelofs:libpng:1.0.8:*:*:*:*:*:*:* |
greg_roelofs | libpng | 1.0.9 | cpe:2.3:a:greg_roelofs:libpng:1.0.9:*:*:*:*:*:*:* |
greg_roelofs | libpng | 1.0.11 | cpe:2.3:a:greg_roelofs:libpng:1.0.11:*:*:*:*:*:*:* |
greg_roelofs | libpng | 1.0.12 | cpe:2.3:a:greg_roelofs:libpng:1.0.12:*:*:*:*:*:*:* |
greg_roelofs | libpng | 1.0.13 | cpe:2.3:a:greg_roelofs:libpng:1.0.13:*:*:*:*:*:*:* |
greg_roelofs | libpng | 1.0.14 | cpe:2.3:a:greg_roelofs:libpng:1.0.14:*:*:*:*:*:*:* |
greg_roelofs | libpng | 1.2.0 | cpe:2.3:a:greg_roelofs:libpng:1.2.0:*:*:*:*:*:*:* |
frontal2.mandriva.com/security/advisories?name=MDKSA-2003:008
www.debian.org/security/2002/dsa-213
www.mandrakesoft.com/security/advisories?name=MDKSA-2004:063
www.novell.com/linux/security/advisories/2003_004_libpng.html
www.redhat.com/support/errata/RHSA-2003-006.html
www.redhat.com/support/errata/RHSA-2003-007.html
www.redhat.com/support/errata/RHSA-2003-119.html
www.redhat.com/support/errata/RHSA-2003-157.html
www.redhat.com/support/errata/RHSA-2004-249.html
www.redhat.com/support/errata/RHSA-2004-402.html
www.securityfocus.com/bid/6431
bugzilla.fedora.us/show_bug.cgi?id=1943
exchange.xforce.ibmcloud.com/vulnerabilities/10925
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3657