Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

greg roelofs libpng 1.2.1 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2006-3334
Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng prior to 1.2.12 allows context-dependent malicious users to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to "chunk error processing," possibly i...
Greg Roelofs Libpng 1.2.3Greg Roelofs Libpng 1.2.4Greg Roelofs Libpng 1.2.5Greg Roelofs Libpng 1.2.10Greg Roelofs Libpng 1.2.2Greg Roelofs Libpng 1.2.9Greg Roelofs LibpngGreg Roelofs Libpng 1.2.0Greg Roelofs Libpng 1.2.1Greg Roelofs Libpng 1.2.7rc1Greg Roelofs Libpng 1.2.8Greg Roelofs Libpng 1.2.6Greg Roelofs Libpng 1.2.7
7.5
CVSSv2
CVE-2002-1363
Portable Network Graphics (PNG) library libpng 1.2.5 and previous versions does not correctly calculate offsets, which allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.
Greg Roelofs Libpng 1.0.13Greg Roelofs Libpng 1.0.14Greg Roelofs Libpng 1.2.1Greg Roelofs Libpng 1.2.2Greg Roelofs Libpng 1.2.3Greg Roelofs Libpng 1.0.7Greg Roelofs Libpng 1.0.8Greg Roelofs Libpng 1.0.5Greg Roelofs Libpng 1.0.6Greg Roelofs Libpng 1.2.4Greg Roelofs Libpng 1.0.11Greg Roelofs Libpng 1.0.12Greg Roelofs Libpng 1.0.9Greg Roelofs Libpng 1.2.0
2.6
CVSSv2
CVE-2006-5793
The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 up to and including 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent malicious users to cause a denial of service (crash) via malformed sPLT chunks that trigger an...
Greg Roelofs Libpng 1.0.9Greg Roelofs Libpng 1.2.0Greg Roelofs Libpng 1.2.5Greg Roelofs Libpng 1.2.6Greg Roelofs Libpng 1.0.7Greg Roelofs Libpng 1.0.8Greg Roelofs Libpng 1.2.3Greg Roelofs Libpng 1.2.4Greg Roelofs Libpng 1.0.6Greg Roelofs Libpng 1.2.12Greg Roelofs Libpng 1.2.2Greg Roelofs Libpng 1.2.8Greg Roelofs Libpng 1.2.9Greg Roelofs Libpng 1.2.1Greg Roelofs Libpng 1.2.10Greg Roelofs Libpng 1.2.11Greg Roelofs Libpng 1.2.7Greg Roelofs Libpng 1.2.7rc1
7.5
CVSSv2
CVE-2002-0660
Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other operating systems, may allow malicious users to cause a denial of service and possibly execute arbitrary code, a different vulnerability than CVE-2002-0728.
Greg Roelofs Libpng3 1.2.1Greg Roelofs Libpng 1.0.12
5
CVSSv2
CVE-2002-0728
Buffer overflow in the progressive reader for libpng 1.2.x prior to 1.2.4, and 1.0.x prior to 1.0.14, allows malicious users to cause a denial of service (crash) via a PNG data stream that has more IDAT data than indicated by the IHDR chunk.
Greg Roelofs Libpng 1.2.4Greg Roelofs Libpng 1.0.14
7.5
CVSSv2
CVE-2004-0768
libpng 1.2.5 and previous versions does not properly calculate certain buffer offsets, which could allow remote malicious users to execute arbitrary code via a buffer overflow attack.
Greg Roelofs Libpng3 1.2.3Greg Roelofs Libpng3 1.2.4Greg Roelofs Libpng3 1.2.5Greg Roelofs Libpng3 1.2.0Greg Roelofs Libpng3 1.2.1Greg Roelofs Libpng3 1.2.2
5
CVSSv2
CVE-2004-0598
The png_handle_iCCP function in libpng 1.2.5 and previous versions allows remote malicious users to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference.
Greg Roelofs Libpng
5
CVSSv2
CVE-2004-0599
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and previous versions allow remote malicious users to cause a denial of service (application crash) v...
Greg Roelofs Libpng
10
CVSSv2
CVE-2004-0597
Multiple buffer overflows in libpng 1.2.5 and previous versions, as used in multiple products, allow remote malicious users to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tR...
Microsoft Windows Messenger 5.0Greg Roelofs LibpngMicrosoft Msn Messenger 6.1Microsoft Msn Messenger 6.2Microsoft Windows Media Player 9Microsoft Windows 98seMicrosoft Windows Me
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook