Skip to content
OpenAdvisories
Unscored CVE-2004-0768 EUVD-2004-0766GHSA-8p78-6v29-xw89

libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code v…

Published Aug 19, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 3.0 libpng 1.0.12-3.woody.7 DSA-536
Debian 3.0 libpng3 1.2.1-1.1.woody.7 DSA-536

Advisories 1

References