CVE-2004-0421

N/A
Published: May 5, 2004 at 04:00 AM UTC
Updated: June 16, 2026 at 10:05 PM UTC
5 products affected across 4 vendorsEnterprise LinuxEnterprise Linux DesktopSecure Linux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 4%

Description

The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.

Affected

References (17)

Vendor Advisoryx_refsource_TRUSTIXMailing List
http://marc.info/?l=bugtraq&m=108335030208523&w=2
Third Party Advisoryx_refsource_SECUNIABroken Link
http://secunia.com/advisories/22957
Third Party Advisoryx_refsource_SECUNIABroken Link
http://secunia.com/advisories/22958
Vendor Advisoryx_refsource_DEBIANBroken Link
http://www.debian.org/security/2004/dsa-498

CVSS

Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-125

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card