CVE-2004-0421 PUBLISHED CVSS 5 MEDIUM

The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.

EPSS 3.31% · 87.1th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
3.31%
87.1th percentile

Affected Products

VendorProductVersions
n/an/an/a
redhatenterprise_linux2.1, 3.0
trustixsecure_linux2.1, 2.0
redhatenterprise_linux_desktop3.0
redhatlibpng1.2.2-20, 1.2.2-16
libpnglibpng1.0.11, 1.0.12, 1.0.13
openpkgopenpkg2.0, 1.3

Timeline

References

Open in Interactive Console →