CVE-2004-0421

The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.
References
Link Resource
http://lists.apple.com/mhonarc/security-announce/msg00056.html Broken Link
http://marc.info/?l=bugtraq&m=108334922320309&w=2 Mailing List
http://marc.info/?l=bugtraq&m=108335030208523&w=2 Mailing List
http://marc.info/?l=fedora-announce-list&m=108451350029261&w=2 Mailing List
http://marc.info/?l=fedora-announce-list&m=108451353608968&w=2 Mailing List
http://secunia.com/advisories/22957 Broken Link
http://secunia.com/advisories/22958 Broken Link
http://www.debian.org/security/2004/dsa-498 Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2004:040 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:212 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:213 Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2004-180.html Broken Link Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-181.html Broken Link
http://www.securityfocus.com/bid/10244 Broken Link Patch Third Party Advisory VDB Entry Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16022 Broken Link VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11710 Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A971 Broken Link
http://lists.apple.com/mhonarc/security-announce/msg00056.html Broken Link
http://marc.info/?l=bugtraq&m=108334922320309&w=2 Mailing List
http://marc.info/?l=bugtraq&m=108335030208523&w=2 Mailing List
http://marc.info/?l=fedora-announce-list&m=108451350029261&w=2 Mailing List
http://marc.info/?l=fedora-announce-list&m=108451353608968&w=2 Mailing List
http://secunia.com/advisories/22957 Broken Link
http://secunia.com/advisories/22958 Broken Link
http://www.debian.org/security/2004/dsa-498 Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2004:040 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:212 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:213 Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2004-180.html Broken Link Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-181.html Broken Link
http://www.securityfocus.com/bid/10244 Broken Link Patch Third Party Advisory VDB Entry Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16022 Broken Link VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11710 Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A971 Broken Link
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:libpng:libpng:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.0.8:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.0.10:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.0.11:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.0.12:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.0.13:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.0.14:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:libpng:libpng:1.2.5:*:*:*:*:*:*:*
cpe:2.3:a:openpkg:openpkg:1.3:*:*:*:*:*:*:*
cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:libpng:1.2.2-16:*:*:*:*:*:*:*
cpe:2.3:a:redhat:libpng:1.2.2-20:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux:2.1:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*
cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*
cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2004-08-18 04:00

Updated : 2025-04-03 01:03


NVD link : CVE-2004-0421

Mitre link : CVE-2004-0421

CVE.ORG link : CVE-2004-0421


JSON object : View

Products Affected

trustix

  • secure_linux

redhat

  • libpng
  • enterprise_linux_desktop
  • enterprise_linux

openpkg

  • openpkg

libpng

  • libpng
CWE
CWE-125

Out-of-bounds Read