Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2004-0597
HistoryAug 05, 2004 - 4:00 a.m.

CVE-2004-0597

2004-08-0504:00:00
mitre
www.cve.org

7.4 High

AI Score

Confidence

Low

0.964 High

EPSS

Percentile

99.6%

JSON

Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.

References

Related

checkpoint_advisories 2
nvd 2
cve 2
cert 6
ubuntucve 1
securityvulns 8
coresecurity 1
nessus 22
openvas 16
f5 2
freebsd 1
slackware 3
gentoo 2
redhat 2
suse 7
debian 1
osv 1
checkpoint_advisories
checkpoint_advisories
libpng Transparency Chunk Length Buffer Overflow (CVE-2004-0597)
2010-02-21 00:00:00
Libpng png_handle_sBIT Local Buffer Overflow - Ver2 (CVE-2004-0597)
2014-03-03 00:00:00
nvd
nvd
CVE-2004-0597
2004-11-23 05:00:00
CVE-2004-0954
2004-12-23 05:00:00
cve
cve
CVE-2004-0597
2004-11-23 05:00:00
CVE-2004-0954
2004-12-23 05:00:00
cert
cert
libpng png_handle_sBIT() performs insufficient bounds checking
2004-08-04 00:00:00
Microsoft Internet Explorer buffer overflow in PNG image rendering component
2005-06-14 00:00:00
libpng png_handle_iCCP() NULL pointer dereference
2004-08-04 00:00:00
ubuntucve
ubuntucve
CVE-2004-0597
2004-11-23 00:00:00
securityvulns
securityvulns
Internet Explorer PNG Overflow
2005-06-15 00:00:00
[VulnWatch] CORE-2004-0819: MSN Messenger PNG Image Parsing Vulnerability
2005-02-09 00:00:00
US-CERT Technical Cyber Security Alert TA04-217A -- Multiple Vulnerabilities in libpng
2004-08-05 00:00:00
coresecurity
coresecurity
MSN Messenger PNG Image Parsing Vulnerability
2005-02-08 00:00:00
nessus
nessus
MS05-009: Vulnerability in PNG Processing Could Allow Remote Code Execution (890261)
2005-02-08 00:00:00
Fedora Core 2 : libpng10-1.0.15-8 (2004-238)
2004-08-05 00:00:00
Fedora Core 1 : libpng-1.2.5-7 (2004-237)
2004-08-05 00:00:00
openvas
openvas
FreeBSD Ports: png
2008-09-04 00:00:00
Slackware: Security Advisory (SSA:2004-223-02)
2012-09-10 00:00:00
Gentoo Security Advisory GLSA 200408-03 (libpng)
2008-09-24 00:00:00
f5
f5
Vulnerabilities in libpng - CAN-2004-0597, CAN-2004-0598, CAN-2004-0599
2007-05-17 04:00:00
SOL4009 - Vulnerabilities in libpng - CAN-2004-0597, CAN-2004-0598, CAN-2004-0599
2007-05-16 00:00:00
freebsd
freebsd
libpng stack-based buffer overflow and other code concerns
2004-08-04 00:00:00
slackware
slackware
[slackware-security] imagemagick
2004-08-10 21:26:39
libpng
2004-08-09 20:40:50
[slackware-security] Mozilla
2004-08-10 21:17:12
gentoo
gentoo
libpng: Numerous vulnerabilities
2004-08-05 00:00:00
Mozilla, Firefox, Thunderbird, Galeon, Epiphany: New releases fix vulnerabilities
2004-08-23 00:00:00
redhat
redhat
(RHSA-2004:402) libpng security update
2004-08-04 00:00:00
(RHSA-2004:421) mozilla security update
2004-08-04 00:00:00
suse
suse
remote system compromise in libpng
2004-08-04 15:12:06
remote DoS condition in apache2
2004-09-06 13:51:41
remote code execution in cups
2004-09-15 14:45:26
debian
debian
[SECURITY] [DSA 536-1] New libpng, libpng3 packages fix multiple vulnerabilities
2004-08-05 02:10:24
osv
osv
libpng - several vulnerabilities
2004-08-04 00:00:00

7.4 High

AI Score

Confidence

Low

0.964 High

EPSS

Percentile

99.6%

JSON
Related for CVELIST:CVE-2004-0597
checkpoint_advisories2nvd2cve2cert6ubuntucve1securityvulns8coresecurity1nessus22openvas16f52freebsd1slackware3gentoo2redhat2suse7debian1osv1