Buffer Overflow Vulnerabilities in Libpng Affecting Multiple Products

CVE-2004-0597

Summary

Libpng versions 1.2.5 and earlier contain multiple buffer overflow vulnerabilities that can be exploited by remote attackers. These flaws arise from improper validation of the length of transparency chunk (tRNS) data in the png_handle_tRNS function, as well as insufficient bounds checking in png_handle_sBIT and png_handle_hIST functions. This can lead to arbitrary code execution when processing crafted PNG images, posing a significant risk to systems utilizing affected versions.

References