Unscored DSA-536 4 CVEs

libpng - several vulnerabilities

Published Aug 4, 2004 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 3.0	libpng	1.0.12-3.woody.7
Debian · 3.0	libpng3	1.2.1-1.1.woody.7

Vulnerabilities 4

Unscored —

CVE-2004-0597 Public exploit EPSS 82%

Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute …

Aug 5, 2004
Unscored —

CVE-2004-0598

The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (applicat…

Aug 5, 2004
Unscored —

CVE-2004-0599

Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) p…

Aug 5, 2004
Unscored —

CVE-2004-0768

libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to exec…

Aug 19, 2004