Intrusion Preventionlibpng.Chunk.Handling.Buffer.Overflow
Description
libpng is a Portable Network Graphics (PNG) library for Unix platforms.Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images.
Affected Products
libpng libpng3 1.2.5 and earlier versions.
Impact
Gain access.
Recommended Actions
Patches have been released for the vulnerable versions. Please apply them as soon as possible.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-12-11 | 16.978 | |
| 2020-10-26 | 16.949 | Name:libpng. Buffer. Overflow. SMTP:libpng. Chunk. Handling. Buffer. Overflow |
| ID | 12039 |
| Created | Jul 10, 2006 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2004-0597 |
| Exploit Prediction Score | 96.41% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |