CVE-2002-1363
greg roelofs libpng: no CVSS score yet. EPSS 6.1% chance of exploitation in the next 30 days.
Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.
- EPSS
- 6.1% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- greg_roelofs:libpng
References
- http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:008
- http://www.debian.org/security/2002/dsa-213
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:063
- http://www.novell.com/linux/security/advisories/2003_004_libpng.html
- http://www.redhat.com/support/errata/RHSA-2003-006.html