Open Vulnerability and Assessment Language (OVAL)
Contact Us Downloads News July 2, 2009 Search
link to OVAL home page

View Definition

Definition Id: oval:org.mitre.oval:def:1479 Date: 2004-12-12
Title: Integer Overflow in libpng via Malformed PNG Image
Description: Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.
Version: 1 Class: vulnerability
Status: ACCEPTED Reference(s): CVE-2004-0599
Family: unix
Platform(s): Sun Solaris 7 Product(s): libpng
Definition Synopsis:

OVAL is CVE Compatible