CVE-2004-0597 PUBLISHED CVSS 10 CRITICAL

Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.

EPSS 85.09% · 99.3th percentile

Risk Scores

CVSS v2.0
10
EPSS Score
85.09%
99.3th percentile

Affected Products

VendorProductVersions
microsoftwindows_messenger5.0
microsoftwindows_98se
microsoftmsn_messenger6.1, 6.2
microsoftwindows_media_player9
microsoftwindows_me
n/an/an/a
greg_roelofslibpng0

Timeline

References

…and 24 more

Open in Interactive Console →