Unscored CVE-2002-0660 EUVD-2002-0654GHSA-qv23-5x46-j87h

Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other operating systems, may allow at…

Published Aug 10, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other operating systems, may allow attackers to cause a denial of service and possibly execute arbitrary code, a different vulnerability than CVE-2002-0728.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 3.0	libpng	1.0.12-3.woody.2	DSA-140
Debian 3.0	libpng3	1.2.1-1.1.woody.2	DSA-140

Advisories 1

DSA-140 libpng - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026

References

DSA-140 vendor-advisory
RHSA-2002:152 vendor-advisory
RHSA-2002:151 vendor-advisory