CVE:CVE-2004-0421
CNNVD:CNNVD-200408-166
libpng是多种应用程序使用的解析PNG图象格式的库。
libpng不正确处理部分不合法PNG图象，远程攻击者可以利用这个漏洞对使用这库的应用程序进行拒绝服务攻击。
攻击者构建特殊的PNG文件，可引起连接到libpng库的应用程序打开时，由于越界访问而导致崩溃，产生拒绝服务。
solution:Upgrade greg_roelofs libpng to a higher version than 1.0,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.0.13,1.0.14,and avoid the version 1.0,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.0.13,1.0.14; Upgrade greg_roelofs libpng3 to a higher version than 1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,and avoid the version 1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5; Upgrade openpkg openpkg to a higher version than 1.3,2.0,and avoid the version 1.3,2.0; Upgrade redhat libpng to a higher version than 1.2.2-16,1.2.2-20,10.1.0.13.8,10.1.0.13.11,and avoid the version 1.2.2-16,1.2.2-20,10.1.0.13.8,10.1.0.13.11; Upgrade redhat enterprise_linux to a higher version than 2.1,3.0,and avoid the version 2.1,3.0; Upgrade redhat enterprise_linux_desktop to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat linux_advanced_workstation to a higher version than 2.1,and avoid the version 2.1; Upgrade trustix secure_linux to a higher version than 2.0,2.1,and avoid the version 2.0,2.1