[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

libpng buffer overflow

ID: oval:org.mitre.oval:def:7709Date: (C)2010-01-15   (M)2022-03-31
Class: VULNERABILITYFamily: windows




Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.

Platform:
Microsoft Windows 98
Microsoft Windows ME
Microsoft Windows NT
Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Microsoft Windows Vista
Microsoft Windows 7
Product:
Microsoft Windows Messenger
Microsoft MSN Messenger
Adobe Acrobat Reader
Reference:
CVE-2004-0597
CVE    1
CVE-2004-0597
CPE    12
cpe:/o:microsoft:windows_xp::sp1:x64
cpe:/o:microsoft:windows_xp::sp1:x86
cpe:/a:microsoft:windows_messenger:4.7
cpe:/o:microsoft:windows_2000::sp4
...

© SecPod Technologies