CVE-2004-0597 : Détail

Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.

Métriques

EPSS

Score EPSS

Percentile EPSS

Informations sur l'Exploit

Exploit Database EDB-ID : 393

Date de publication : 2004-08-12 22h00 +00:00
Auteur : anonymous
EDB Vérifié : Yes

Exploit Database EDB-ID : 389

Date de publication : 2004-08-10 22h00 +00:00
Auteur : infamous41md
EDB Vérifié : Yes

Exploit Database EDB-ID : 25094

Date de publication : 2005-02-07 23h00 +00:00
Auteur : ATmaCA
EDB Vérifié : Yes

Products Mentioned

Configuraton 0

Greg_roelofs>>Libpng >> Version To (including) 1.2.5

Microsoft>>Msn_messenger >> Version 6.1

Microsoft>>Msn_messenger >> Version 6.2

Microsoft>>Windows_media_player >> Version 9

Microsoft>>Windows_messenger >> Version 5.0

Configuraton 0

Microsoft>>Windows_98se >> Version *

Microsoft>>Windows_me >> Version *

Références