CVE

Id
9025  
CVE No.
CVE-2004-0597  
Status
Candidate  
Description
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.  
Phase
Assigned (20040623)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
58342 9025 CVE-2004-0597 MISC:http://scary.beasts.org/security/CESA-2004-001.txt  View
58343 9025 CVE-2004-0597 VULNWATCH:20050208 CORE-2004-0819: MSN Messenger PNG Image Parsing Vulnerability  View
58344 9025 CVE-2004-0597 MISC:http://www.coresecurity.com/common/showdoc.php?idx=421&idxseccion=10  View
58345 9025 CVE-2004-0597 BUGTRAQ:20050209 MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit  View
58346 9025 CVE-2004-0597 URL:http://marc.info/?l=bugtraq&m=110796779903455&w=2  View
58347 9025 CVE-2004-0597 CONFIRM:http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-114816-02-1  View
58348 9025 CVE-2004-0597 APPLE:APPLE-SA-2004-09-09  View
58349 9025 CVE-2004-0597 URL:http://lists.apple.com/mhonarc/security-announce/msg00056.html  View
58350 9025 CVE-2004-0597 CONECTIVA:CLA-2004:856  View
58351 9025 CVE-2004-0597 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856  View
58352 9025 CVE-2004-0597 DEBIAN:DSA-536  View
58353 9025 CVE-2004-0597 URL:http://www.debian.org/security/2004/dsa-536  View
58354 9025 CVE-2004-0597 FEDORA:FLSA:1943  View
58355 9025 CVE-2004-0597 URL:https://bugzilla.fedora.us/show_bug.cgi?id=1943  View
58356 9025 CVE-2004-0597 FEDORA:FLSA:2089  View
58357 9025 CVE-2004-0597 URL:http://marc.info/?l=bugtraq&m=109900315219363&w=2  View
58358 9025 CVE-2004-0597 GENTOO:GLSA-200408-03  View
58359 9025 CVE-2004-0597 URL:http://www.gentoo.org/security/en/glsa/glsa-200408-03.xml  View
58360 9025 CVE-2004-0597 GENTOO:GLSA-200408-22  View
58361 9025 CVE-2004-0597 URL:http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml  View
58362 9025 CVE-2004-0597 HP:SSRT4778  View
58363 9025 CVE-2004-0597 URL:http://marc.info/?l=bugtraq&m=109181639602978&w=2  View
58364 9025 CVE-2004-0597 MANDRAKE:MDKSA-2004:079  View
58365 9025 CVE-2004-0597 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:079  View
58366 9025 CVE-2004-0597 MANDRIVA:MDKSA-2006:212  View
58367 9025 CVE-2004-0597 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:212  View
58368 9025 CVE-2004-0597 MANDRIVA:MDKSA-2006:213  View
58369 9025 CVE-2004-0597 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:213  View
58370 9025 CVE-2004-0597 MS:MS05-009  View
58371 9025 CVE-2004-0597 URL:http://www.microsoft.com/technet/security/bulletin/ms05-009.mspx  View
58372 9025 CVE-2004-0597 REDHAT:RHSA-2004:402  View
58373 9025 CVE-2004-0597 URL:http://www.redhat.com/support/errata/RHSA-2004-402.html  View
58374 9025 CVE-2004-0597 REDHAT:RHSA-2004:421  View
58375 9025 CVE-2004-0597 URL:http://www.redhat.com/support/errata/RHSA-2004-421.html  View
58376 9025 CVE-2004-0597 REDHAT:RHSA-2004:429  View
58377 9025 CVE-2004-0597 URL:http://www.redhat.com/support/errata/RHSA-2004-429.html  View
58378 9025 CVE-2004-0597 SCO:SCOSA-2004.16  View
58379 9025 CVE-2004-0597 URL:http://marc.info/?l=bugtraq&m=109761239318458&w=2  View
58380 9025 CVE-2004-0597 SCO:SCOSA-2005.49  View
58381 9025 CVE-2004-0597 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt  View
58382 9025 CVE-2004-0597 SUNALERT:200663  View
58383 9025 CVE-2004-0597 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1  View
58384 9025 CVE-2004-0597 SUSE:SUSE-SA:2004:023  View
58385 9025 CVE-2004-0597 URL:http://www.novell.com/linux/security/advisories/2004_23_libpng.html  View
58386 9025 CVE-2004-0597 TRUSTIX:2004-0040  View
58387 9025 CVE-2004-0597 URL:http://www.trustix.net/errata/2004/0040/  View
58388 9025 CVE-2004-0597 BUGTRAQ:20040804 [OpenPKG-SA-2004.035] OpenPKG Security Advisory (png)  View
58389 9025 CVE-2004-0597 URL:http://marc.info/?l=bugtraq&m=109163866717909&w=2  View
58390 9025 CVE-2004-0597 CONFIRM:http://www.mozilla.org/projects/security/known-vulnerabilities.html  View
58391 9025 CVE-2004-0597 CONFIRM:http://www.adobe.com/support/downloads/detail.jsp?ftpID=2679  View
58392 9025 CVE-2004-0597 CERT:TA04-217A  View
58393 9025 CVE-2004-0597 URL:http://www.us-cert.gov/cas/techalerts/TA04-217A.html  View
58394 9025 CVE-2004-0597 CERT:TA05-039A  View
58395 9025 CVE-2004-0597 URL:http://www.us-cert.gov/cas/techalerts/TA05-039A.html  View
58396 9025 CVE-2004-0597 CERT-VN:VU#388984  View
58397 9025 CVE-2004-0597 URL:http://www.kb.cert.org/vuls/id/388984  View
58398 9025 CVE-2004-0597 CERT-VN:VU#817368  View
58399 9025 CVE-2004-0597 URL:http://www.kb.cert.org/vuls/id/817368  View
58400 9025 CVE-2004-0597 BID:15495  View
58401 9025 CVE-2004-0597 URL:http://www.securityfocus.com/bid/15495  View
58402 9025 CVE-2004-0597 BID:10857  View
58403 9025 CVE-2004-0597 URL:http://www.securityfocus.com/bid/10857  View
58404 9025 CVE-2004-0597 OVAL:oval:org.mitre.oval:def:2274  View
58405 9025 CVE-2004-0597 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2274  View
58406 9025 CVE-2004-0597 OVAL:oval:org.mitre.oval:def:2378  View
58407 9025 CVE-2004-0597 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2378  View
58408 9025 CVE-2004-0597 OVAL:oval:org.mitre.oval:def:594  View
58409 9025 CVE-2004-0597 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:594  View
58410 9025 CVE-2004-0597 OVAL:oval:org.mitre.oval:def:4492  View
58411 9025 CVE-2004-0597 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4492  View
58412 9025 CVE-2004-0597 OVAL:oval:org.mitre.oval:def:11284  View
58413 9025 CVE-2004-0597 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11284  View
58414 9025 CVE-2004-0597 OVAL:oval:org.mitre.oval:def:7709  View
58415 9025 CVE-2004-0597 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7709  View
58416 9025 CVE-2004-0597 SECUNIA:22957  View
58417 9025 CVE-2004-0597 URL:http://secunia.com/advisories/22957  View
58418 9025 CVE-2004-0597 SECUNIA:22958  View
58419 9025 CVE-2004-0597 URL:http://secunia.com/advisories/22958  View
58420 9025 CVE-2004-0597 XF:libpng-pnghandle-bo(16894)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62962 JVNDB-2004-000304 libpng における不正な PNG ファイルによるサービス運用妨害 (DoS) の脆弱性 libpng には、png_handle_iCCP() 関数においてメモリ割り当ての際に NULL ポインタがデリファレンスされる問題が存在し、アプリケーションがクラッシュしてサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2004-0598 9025 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000304.html  View