NVD

Id
71024  
Name
CVE-2004-0597  
Description
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-11-23  
Modified Date
2017-07-10  
Seq
2004-0597  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366656 71024 CVE-2004-0597 SCOSA-2005.49  View
366657 71024 CVE-2004-0597 CLA-2004:856  View
366658 71024 CVE-2004-0597 20040804 [OpenPKG-SA-2004.035] OpenPKG Security Advisory (png)  View
366659 71024 CVE-2004-0597 SSRT4778  View
366660 71024 CVE-2004-0597 SCOSA-2004.16  View
366661 71024 CVE-2004-0597 FLSA:2089  View
366662 71024 CVE-2004-0597 20050209 MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit  View
366663 71024 CVE-2004-0597 oval:org.mitre.oval:def:11284  View
366664 71024 CVE-2004-0597 oval:org.mitre.oval:def:2274  View
366665 71024 CVE-2004-0597 oval:org.mitre.oval:def:2378  View
366666 71024 CVE-2004-0597 oval:org.mitre.oval:def:4492  View
366667 71024 CVE-2004-0597 oval:org.mitre.oval:def:594  View
366668 71024 CVE-2004-0597 oval:org.mitre.oval:def:7709  View
366669 71024 CVE-2004-0597 http://scary.beasts.org/security/CESA-2004-001.txt  View
366670 71024 CVE-2004-0597 200663  View
366671 71024 CVE-2004-0597 http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-114816-02-1  View
366672 71024 CVE-2004-0597 http://www.adobe.com/support/downloads/detail.jsp?ftpID=2679  View
366673 71024 CVE-2004-0597 http://www.coresecurity.com/common/showdoc.php?idx=421&idxseccion=10  View
366674 71024 CVE-2004-0597 DSA-536  View
366675 71024 CVE-2004-0597 GLSA-200408-03  View
366676 71024 CVE-2004-0597 GLSA-200408-22  View
366677 71024 CVE-2004-0597 VU#388984  View
366678 71024 CVE-2004-0597 VU#817368  View
366679 71024 CVE-2004-0597 MDKSA-2004:079  View
366680 71024 CVE-2004-0597 MDKSA-2006:212  View
366681 71024 CVE-2004-0597 MDKSA-2006:213  View
366682 71024 CVE-2004-0597 MS05-009  View
366683 71024 CVE-2004-0597 http://www.mozilla.org/projects/security/known-vulnerabilities.html  View
366684 71024 CVE-2004-0597 SUSE-SA:2004:023  View
366685 71024 CVE-2004-0597 RHSA-2004:402  View
366686 71024 CVE-2004-0597 RHSA-2004:421  View
366687 71024 CVE-2004-0597 RHSA-2004:429  View
366688 71024 CVE-2004-0597 10857  View
366689 71024 CVE-2004-0597 15495  View
366690 71024 CVE-2004-0597 2004-0040  View
366691 71024 CVE-2004-0597 TA04-217A  View
366692 71024 CVE-2004-0597 TA05-039A  View
366693 71024 CVE-2004-0597 libpng-pnghandle-bo(16894)  View
366694 71024 CVE-2004-0597 FLSA:1943  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61889 JVNDB-2005-000091 libpng における不正な PNG イメージによる複数のバッファオーバーフローの脆弱性 libpng には、画像の透過を指定する tRNS チャンクのデータセグメントの長さのチェック、または png_handle_sBIT() や png_handle_hIST() 関数で取り扱うデータの境界チェックが適切に行われないため、バッファオーバーフローの脆弱性が存在します。 CVE-2004-0597 9024 CVE-2004-0597 71024 10 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000091.html 2005-02-08 2007-04-01 View