CVE

Id
5118  
CVE No.
CVE-2002-0728  
Status
Candidate  
Description
Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of service (crash) via a PNG data stream that has more IDAT data than indicated by the IHDR chunk.  
Phase
Modified (20020817-01)  
Votes
ACCEPT(4) Armstrong, Baker, Cole, Cox | MODIFY(1) Frech | NOOP(3) Christey, Foat, Wall  
Comments
Christey> CONECTIVA:CLA-2002:512 | Christey> DEBIAN:DSA-140 | Add libpng2, libpng3 | Christey> REDHAT:RHSA-2002:152 (per Mark Cox) | Christey> Change desc: these are versions *before* 1.2.4, and *before* 1.0.14. | REDHAT:RHSA-2002:151 | Christey> XF:libpng-datastream-bo(9744) | URL:http://www.iss.net/security_center/static/9744.php | BID:5059 | URL:http://www.securityfocus.com/bid/5059 | Christey> CALDERA:CSSA-2002-042.0 | URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-042.0.txt | Frech> XF:libpng-progressive-reader-bo(9744) | Christey> CALDERA:CSSA-2002-042.0 | URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-042.0.txt  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
27022 5118 CVE-2002-0728 CONFIRM:ftp://swrinde.nde.swri.edu/pub/png-group/archives/png-list.200207  View
27023 5118 CVE-2002-0728 MANDRAKE:MDKSA-2002:049  View
27024 5118 CVE-2002-0728 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-049.php  View
27025 5118 CVE-2002-0728 CONECTIVA:CLA-2002:512  View
27026 5118 CVE-2002-0728 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000512  View
27027 5118 CVE-2002-0728 DEBIAN:DSA-140  View
27028 5118 CVE-2002-0728 URL:http://www.debian.org/security/2002/dsa-140  View
27029 5118 CVE-2002-0728 REDHAT:RHSA-2002:152  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63870 JVNDB-2002-000197 RedHat Linux に含まれる Libpng の progressive reader におけるバッファオーバーフローの脆弱性 ------------ CVE-2002-0728 5118 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000197.html  View