libpng stack-based buffer overflow and other code concerns

2004-08-0400:00:00

vuxml.freebsd.org

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.964 High

EPSS

Percentile

99.6%

JSON

Chris Evans has discovered multiple vulnerabilities in libpng,
which can be exploited by malicious people to compromise a
vulnerable system or cause a DoS (Denial of Service).

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpng<= 1.2.5_7UNKNOWN
FreeBSDanynoarchlinux-png<= 1.0.14_3UNKNOWN
FreeBSDanynoarchfirefox< 0.9.3UNKNOWN
FreeBSDanynoarchthunderbird< 0.7.3UNKNOWN
FreeBSDanynoarchlinux-mozilla< 1.7.2UNKNOWN
FreeBSDanynoarchlinux-mozilla-devel< 1.7.2UNKNOWN
FreeBSDanynoarchmozilla< 1.7.2,2UNKNOWN
FreeBSDanynoarchmozilla-gtk1< 1.7.2UNKNOWN
FreeBSDanynoarchnetscape-communicator<= 4.78UNKNOWN
FreeBSDanynoarchnetscape-navigator<= 4.78UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	png	<= 1.2.5_7	UNKNOWN
FreeBSD	any	noarch	linux-png	<= 1.0.14_3	UNKNOWN
FreeBSD	any	noarch	firefox	< 0.9.3	UNKNOWN
FreeBSD	any	noarch	thunderbird	< 0.7.3	UNKNOWN
FreeBSD	any	noarch	linux-mozilla	< 1.7.2	UNKNOWN
FreeBSD	any	noarch	linux-mozilla-devel	< 1.7.2	UNKNOWN
FreeBSD	any	noarch	mozilla	< 1.7.2,2	UNKNOWN
FreeBSD	any	noarch	mozilla-gtk1	< 1.7.2	UNKNOWN
FreeBSD	any	noarch	netscape-communicator	<= 4.78	UNKNOWN
FreeBSD	any	noarch	netscape-navigator	<= 4.78	UNKNOWN