7.5
CVE-2004-0768
- EPSS 3.26%
- Veröffentlicht 20.10.2004 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:06:20
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginlibpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Greg Roelofs ≫ Libpng3 Version1.2.0
Greg Roelofs ≫ Libpng3 Version1.2.1
Greg Roelofs ≫ Libpng3 Version1.2.2
Greg Roelofs ≫ Libpng3 Version1.2.3
Greg Roelofs ≫ Libpng3 Version1.2.4
Greg Roelofs ≫ Libpng3 Version1.2.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.26% | 0.867 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
https://bugzilla.fedora.us/show_bug.cgi?id=1943
http://secunia.com/advisories/33137
http://security.gentoo.org/glsa/glsa-200812-15.xml
http://www.debian.org/security/2004/dsa-536
https://exchange.xforce.ibmcloud.com/vulnerabilities/16914