CVE-2004-0768 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Roelofs Libpng3
3 documents3 sources
Severity
7.5HIGHNVD
EPSS
4.1%
top 11.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 20
Latest updateApr 29
Description
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS vector
AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4