CVEvulnerability

CVE-2004-0421

5.0 MEDIUM Published 2004-08-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-08-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-125

Description

The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.

Affected configurations

• libpng libpng 1.0.0 • libpng libpng 1.0.5 • libpng libpng 1.0.6 • libpng libpng 1.0.7 • libpng libpng 1.0.8 • libpng libpng 1.0.9 • libpng libpng 1.0.10 • libpng libpng 1.0.11 • libpng libpng 1.0.12 • libpng libpng 1.0.13 • libpng libpng 1.0.14 • libpng libpng 1.2.0 • libpng libpng 1.2.1 • libpng libpng 1.2.2 • libpng libpng 1.2.3 • libpng libpng 1.2.4 • libpng libpng 1.2.5 • openpkg openpkg 1.3 • openpkg openpkg 2.0 • redhat libpng 1.2.2-16 • redhat libpng 1.2.2-20 • redhat enterprise linux 2.1 • redhat enterprise linux 3.0 • redhat enterprise linux desktop 3.0 • trustix secure linux 2.0 • trustix secure linux 2.1

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

Referenced by CWE · observed example (1)

  • CWE-125 Out-of-bounds Read weakness

References