CVE-2004-0599
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions...
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.
Exploit likelihood
What each source reports
NVD Score used
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.
- Record
CVE-2004-0599- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.
- Record
CVE-2004-0599- Updated
- 2026-11-02
EUVDEUVD-2004-0598 No score
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.
- Record
EUVD-2004-0598- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xpw2-c8vq-gfg3 No score
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions...
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.
- Record
GHSA-xpw2-c8vq-gfg3- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libpngDebian:3.0 |
before 1.0.12-3.woody.7 | 1.0.12-3.woody.7 |
libpng3Debian:3.0 |
before 1.2.1-1.1.woody.7 | 1.2.1-1.1.woody.7 |
libpngDebian:3.0 |
before 1.0.12-3.woody.9 | 1.0.12-3.woody.9 |
libpng3Debian:3.0 |
before 1.2.1-1.1.woody.9 | 1.2.1-1.1.woody.9 |
libpngRed Hat:enterprise_linux:3::as |
before 2:1.2.2-25 | 2:1.2.2-25 |
libpng-debuginfoRed Hat:enterprise_linux:3::as |
before 2:1.2.2-25 | 2:1.2.2-25 |
libpng-develRed Hat:enterprise_linux:3::as |
before 2:1.2.2-25 | 2:1.2.2-25 |
libpng10Red Hat:enterprise_linux:3::as |
before 0:1.0.13-15 | 0:1.0.13-15 |
libpng10-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.0.13-15 | 0:1.0.13-15 |
libpng10-develRed Hat:enterprise_linux:3::as |
before 0:1.0.13-15 | 0:1.0.13-15 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libpngRed Hat:enterprise_linux:3::desktop |
before 2:1.2.2-25 | 2:1.2.2-25 |
libpng-debuginfoRed Hat:enterprise_linux:3::desktop |
before 2:1.2.2-25 | 2:1.2.2-25 |
libpng-develRed Hat:enterprise_linux:3::desktop |
before 2:1.2.2-25 | 2:1.2.2-25 |
libpng10Red Hat:enterprise_linux:3::desktop |
before 0:1.0.13-15 | 0:1.0.13-15 |
libpng10-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.0.13-15 | 0:1.0.13-15 |
libpng10-develRed Hat:enterprise_linux:3::desktop |
before 0:1.0.13-15 | 0:1.0.13-15 |
libpngRed Hat:enterprise_linux:3::es |
before 2:1.2.2-25 | 2:1.2.2-25 |
libpng-debuginfoRed Hat:enterprise_linux:3::es |
before 2:1.2.2-25 | 2:1.2.2-25 |
libpng-develRed Hat:enterprise_linux:3::es |
before 2:1.2.2-25 | 2:1.2.2-25 |
libpng10Red Hat:enterprise_linux:3::es |
before 0:1.0.13-15 | 0:1.0.13-15 |
libpng10-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.0.13-15 | 0:1.0.13-15 |
libpng10-develRed Hat:enterprise_linux:3::es |
before 0:1.0.13-15 | 0:1.0.13-15 |
libpngRed Hat:enterprise_linux:3::ws |
before 2:1.2.2-25 | 2:1.2.2-25 |
libpng-debuginfoRed Hat:enterprise_linux:3::ws |
before 2:1.2.2-25 | 2:1.2.2-25 |
libpng-develRed Hat:enterprise_linux:3::ws |
before 2:1.2.2-25 | 2:1.2.2-25 |
libpng10Red Hat:enterprise_linux:3::ws |
before 0:1.0.13-15 | 0:1.0.13-15 |
libpng10-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.0.13-15 | 0:1.0.13-15 |
libpng10-develRed Hat:enterprise_linux:3::ws |
before 0:1.0.13-15 | 0:1.0.13-15 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0599 is a medium vulnerability (CVSS 5.0) in Greg Roelofs Libpng, published August 4, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.20%, the 93rd percentile. Fixed in libpng 1.0.12-3.woody.7.
References
trustix.net/errata/2004/0040
kb.cert.org/vuls/id/477512
sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1
mozilla.org/projects/security/known-vulnerabilities.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1479
redhat.com/support/errata/RHSA-2004-421.html
Show 49 moreShow less
gentoo.org/security/en/glsa/glsa-200408-22.xml
secunia.com/advisories/22958
marc.info?l=bugtraq&m=109900315219363&w=2
bugzilla.fedora.us/show_bug.cgi?id=1943
exchange.xforce.ibmcloud.com/vulnerabilities/16896
scary.beasts.org/security/CESA-2004-001.txt
securityfocus.com/bid/15495
debian.org/security/2004/dsa-536
lists.apple.com/mhonarc/security-announce/msg00056.html
mandriva.com/security/advisories?name=MDKSA-2006:213
us-cert.gov/cas/techalerts/TA04-217A.html
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000856
novell.com/linux/security/advisories/2004_23_libpng.html
nvd.nist.gov/vuln/detail/CVE-2004-0599
github.com/advisories/GHSA-xpw2-c8vq-gfg3
access.redhat.com/errata/RHSA-2004:402
bugzilla.redhat.com/show_bug.cgi?id=127869
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_402.json
cve.org/CVERecord?id=CVE-2002-1363