Greg Roelofs » Libpng : Security Vulnerabilities, CVEs, Published In 2004 (Denial of service)
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.
Max CVSS
5.0
EPSS Score
10.54%
Published
2004-11-23
Updated
2017-10-11
The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference.
Max CVSS
5.0
EPSS Score
11.05%
Published
2004-11-23
Updated
2017-10-11
2 vulnerabilities found