← Back

CVE-2004-0421

nvd nist
Published: Aug 18, 2004Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.

Affected (26)

Show all products
Libpng: Libpng · Openpkg: Openpkg · Redhat: Libpng, Enterprise Linux, Enterprise Linux Desktop · Trustix: Secure Linux
Libpng
1 product
Libpng
Openpkg
1 product
Openpkg
Redhat
3 products
Libpng
Enterprise Linux
Enterprise Linux Desktop
Trustix
1 product
Secure Linux
Configuration A
21 vulnerable
Vulnerable SoftwareAffected Versions
Libpng
Libpng
Version 1.0.0
Libpng
Version 1.0.10
Libpng
Version 1.0.11
Libpng
Version 1.0.12
Libpng
Version 1.0.13
Libpng
Version 1.0.14
Libpng
Version 1.0.5
Libpng
Version 1.0.6
Libpng
Version 1.0.7
Libpng
Version 1.0.8
Libpng
Version 1.0.9
Libpng
Version 1.2.0
Libpng
Version 1.2.1
Libpng
Version 1.2.2
Libpng
Version 1.2.3
Libpng
Version 1.2.4
Libpng
Version 1.2.5
Openpkg
Openpkg
Version 1.3
Openpkg
Version 2.0
Redhat
Libpng
Version 1.2.2-16
Libpng
Version 1.2.2-20
Configuration B
5 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Enterprise Linux
Version 2.1
Enterprise Linux
Version 3.0
Enterprise Linux Desktop
Version 3.0
Trustix
Secure Linux
Version 2.0
Secure Linux
Version 2.1

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (34)

Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Mailing List
Source: cve@mitre.org
Mailing List
Source: cve@mitre.org
Mailing List
Source: cve@mitre.org
Mailing List
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Broken LinkPatchVendor Advisory
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken LinkPatchThird Party AdvisoryVDB EntryVendor Advisory
Source: cve@mitre.org
Broken LinkVDB Entry
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkPatchThird Party AdvisoryVDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link

Timeline

No history available yet.