5.0med
CVE-2004-0598
The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a cer…
Published 22 y ago · modified 4 mo ago · JSON
CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
6.1%
percentile 93%
Public exploits
0
none known
Summary
The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference.
Exploit prediction (EPSS)
6.15% probability of exploitation in the next 30 days, higher than 93% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
References
- trustix.net /errata/2004/0040/ · vendor-advisory, x_refsource_TRUSTIX, x_transferred
- sunsolve.sun.com /search/document.do?assetkey=1-66-200663-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
- mozilla.org /projects/security/known-vulnerabilities.html · x_refsource_CONFIRM, x_transferred
- redhat.com /support/errata/RHSA-2004-402.html · vendor-advisory, x_refsource_REDHAT, x_transferred
- oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10203 · vdb-entry, signature, x_refsource_OVAL, x_transferred
- gentoo.org /security/en/glsa/glsa-200408-22.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
- secunia.com /advisories/22958 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- bugzilla.fedora.us /show_bug.cgi?id=1943 · vendor-advisory, x_refsource_FEDORA, x_transferred
- marc.info /?l=bugtraq&m=109761239318458&w=2 · vendor-advisory, x_refsource_SCO, x_transferred
- scary.beasts.org /security/CESA-2004-001.txt · x_refsource_MISC, x_transferred
- redhat.com /support/errata/RHSA-2004-429.html · vendor-advisory, x_refsource_REDHAT, x_transferred
- debian.org /security/2004/dsa-536 · vendor-advisory, x_refsource_DEBIAN, x_transferred
- lists.apple.com /mhonarc/security-announce/msg00056.html · vendor-advisory, x_refsource_APPLE, x_transferred
- marc.info /?l=bugtraq&m=109163866717909&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- marc.info /?l=bugtraq&m=109181639602978&w=2 · vendor-advisory, x_refsource_HP, x_transferred
- mandriva.com /security/advisories?name=MDKSA-2006:213 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
- us-cert.gov /cas/techalerts/TA04-217A.html · third-party-advisory, x_refsource_CERT, x_transferred
- mandriva.com /security/advisories?name=MDKSA-2006:212 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/16895 · vdb-entry, x_refsource_XF, x_transferred
- kb.cert.org /vuls/id/236656 · third-party-advisory, x_refsource_CERT-VN, x_transferred
- distro.conectiva.com.br /atualizacoes/?id=a&anuncio=000856 · vendor-advisory, x_refsource_CONECTIVA, x_transferred
- securityfocus.com /bid/10857 · vdb-entry, x_refsource_BID, x_transferred
- oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2572 · vdb-entry, signature, x_refsource_OVAL, x_transferred
- novell.com /linux/security/advisories/2004_23_libpng.html · vendor-advisory, x_refsource_SUSE, x_transferred
- gentoo.org /security/en/glsa/glsa-200408-03.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
- mandriva.com /security/advisories?name=MDKSA-2004:079 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
- secunia.com /advisories/22957 · third-party-advisory, x_refsource_SECUNIA, x_transferred
Sources
- CVE List: CVE-2004-0598
- NVD: CVE-2004-0598
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.