LibPNG Graphics Library Multiple Remote Vulnerabilities

Bugtraq ID: 10857
Class: Unknown
CVE: CVE-2004-0597
CVE-2004-0598
CVE-2004-0599
Remote: Yes
Local: No
Published: Aug 04 2004 12:00AM
Updated: Jan 11 2007 07:50PM
Credit: Discovery of these vulnerabilities is credited to Chris Evans. Juliano Rizzo of Core Security Technologies identified these issues in MSN and Windows Messenger.
Vulnerable: Turbolinux Turbolinux Workstation 8.0
Turbolinux Turbolinux Workstation 7.0
Turbolinux Turbolinux Workstation 6.0
Turbolinux Turbolinux Server 8.0
Turbolinux Turbolinux Server 7.0
Turbolinux Turbolinux Server 6.5
Turbolinux Turbolinux Server 6.1
Turbolinux Turbolinux Desktop 10.0
Turbolinux Turbolinux Advanced Server 6.0
Turbolinux Appliance Server Workgroup Edition 1.0
Turbolinux Appliance Server Hosting Edition 1.0
Trustix Secure Linux 2.1
Trustix Secure Linux 2.0
Trustix Secure Enterprise Linux 2.0
SuSE SUSE Linux Enterprise Server 8
SuSE Linux Desktop 1.0
Sun Solaris 1.1.4 -JL
Sun Solaris 9_x86
Sun Solaris 9
Sun Solaris 8_x86
Sun Solaris 8_sparc
Sun Java Desktop System (JDS) 2.0
Sun Java Desktop System (JDS) 1.0
SGI Advanced Linux Environment 3.0
SCO Unixware 7.1.4
S.u.S.E. Linux Personal 9.1
S.u.S.E. Linux Personal 9.0 x86_64
S.u.S.E. Linux Personal 9.0
S.u.S.E. Linux Personal 8.2
S.u.S.E. Linux 8.1
S.u.S.E. Linux 8.0 i386
S.u.S.E. Linux 8.0
S.u.S.E. Linux 7.3 sparc
S.u.S.E. Linux 7.3 ppc
S.u.S.E. Linux 7.3 i386
S.u.S.E. Linux 7.3
S.u.S.E. Linux 7.2 i386
S.u.S.E. Linux 7.2
S.u.S.E. Linux 7.1 x86
S.u.S.E. Linux 7.1 sparc
S.u.S.E. Linux 7.1 ppc
S.u.S.E. Linux 7.1 alpha
S.u.S.E. Linux 7.1
S.u.S.E. Linux 7.0 sparc
S.u.S.E. Linux 7.0 ppc
S.u.S.E. Linux 7.0 i386
S.u.S.E. Linux 7.0 alpha
S.u.S.E. Linux 7.0
Redhat Linux Advanced Work Station 2.1
Redhat Linux 9.0 i386
Redhat Linux 7.3 i686
Redhat Linux 7.3 i386
Redhat Linux 7.3
Redhat Fedora Core2
Redhat Fedora Core1
Redhat Enterprise Linux WS 3
Redhat Enterprise Linux WS 2.1
Redhat Enterprise Linux ES 3
Redhat Enterprise Linux ES 2.1
Redhat Enterprise Linux AS 3
Redhat Enterprise Linux AS 2.1
Redhat Desktop 3.0
OpenPKG OpenPKG 2.1
OpenPKG OpenPKG 2.0
OpenPKG OpenPKG Current
Nortel Networks Symposium Call Center Server (SCCS)
Nortel Networks Optivity Telephony Manager (OTM)
Nortel Networks Mobile Voice Client 2050
Nortel Networks IP softphone 2050
Netscape Communicator 7.0
Mozilla Thunderbird 0.7.2
Mozilla Thunderbird 0.7.1
Mozilla Thunderbird 0.7
Mozilla Firefox 0.9.2
Mozilla Firefox 0.9.1
Mozilla Firefox 0.9 rc
Mozilla Firefox 0.9
Mozilla Firefox 0.8
Mozilla Firebird 0.7
Mozilla Firebird 0.6.1
Mozilla Firebird 0.5
Mozilla Browser 1.7.1
Mozilla Browser 1.7 rc3
Mozilla Browser 1.7
Mozilla Browser 1.6
Mozilla Browser 1.5
Mozilla Browser 1.4.2
Mozilla Browser 1.4.1
Mozilla Browser 1.4 b
Mozilla Browser 1.4 a
Mozilla Browser 1.4
Mozilla Browser 1.3.1
Mozilla Browser 1.3
Mozilla Browser 1.2.1
Mozilla Browser 1.2 Beta
Mozilla Browser 1.2 Alpha
Mozilla Browser 1.2
Mozilla Browser 1.1 Beta
Mozilla Browser 1.1 Alpha
Mozilla Browser 1.1
Mozilla Browser 1.0.2
Mozilla Browser 1.0.1
Mozilla Browser 1.0 RC2
Mozilla Browser 1.0 RC1
Mozilla Browser 1.0
Mozilla Browser 0.9.48
Mozilla Browser 0.9.35
Mozilla Browser 0.9.9
Mozilla Browser 0.9.8
Mozilla Browser 0.9.7
Mozilla Browser 0.9.6
Mozilla Browser 0.9.5
Mozilla Browser 0.9.4 .1
Mozilla Browser 0.9.4
Mozilla Browser 0.9.3
Mozilla Browser 0.9.2 .1
Mozilla Browser 0.9.2
Mozilla Browser 0.8
Microsoft Windows XP Tablet PC Edition SP1
Microsoft Windows XP Professional SP1
Microsoft Windows XP Media Center Edition SP1
Microsoft Windows XP Home SP1
Microsoft Windows XP 64-bit Edition Version 2003 SP1
Microsoft Windows XP 64-bit Edition Version 2003
Microsoft Windows Messenger 4.7 .3000
Microsoft Windows Messenger 4.7 .2009
Microsoft Windows Messenger 5.0
Microsoft MSN Messenger Service 6.2
Microsoft MSN Messenger Service 6.1
Mandriva Linux Mandrake 2006.0 x86_64
Mandriva Linux Mandrake 2006.0
Mandriva Linux Mandrake 10.0 AMD64
Mandriva Linux Mandrake 10.0
Mandriva Linux Mandrake 9.2 amd64
Mandriva Linux Mandrake 9.2
Mandriva Linux Mandrake 9.1 ppc
Mandriva Linux Mandrake 9.1
Mandriva Linux Mandrake 2007.0 x86_64
Mandriva Linux Mandrake 2007.0
MandrakeSoft Multi Network Firewall 2.0
MandrakeSoft Corporate Server 4.0 x86_64
MandrakeSoft Corporate Server 3.0 x86_64
MandrakeSoft Corporate Server 3.0
MandrakeSoft Corporate Server 2.1 x86_64
MandrakeSoft Corporate Server 2.1
MandrakeSoft Corporate Server 4.0
libpng libpng3 1.2.5
libpng libpng3 1.2.4
libpng libpng3 1.2.3
libpng libpng3 1.2.2
libpng libpng3 1.2.1
libpng libpng3 1.2 .0
libpng libpng 1.0.14
libpng libpng 1.0.13
libpng libpng 1.0.12
libpng libpng 1.0.11
libpng libpng 1.0.10
libpng libpng 1.0.9
libpng libpng 1.0.8
libpng libpng 1.0.7
libpng libpng 1.0.6
libpng libpng 1.0.5
libpng libpng 1.0
ImageMagick ImageMagick 5.5.6 .0-20030409
ImageMagick ImageMagick 5.5.3 .2-1.2.0
ImageMagick ImageMagick 5.4.8 .2-1.1.0
ImageMagick ImageMagick 5.4.4 .5
ImageMagick ImageMagick 5.4.3
HP Tru64 5.1 b
HP Tru64 5.1 a PK4 (BL21)
GraphicsMagick GraphicsMagick 1.1
GraphicsMagick GraphicsMagick 1.0.6
GraphicsMagick GraphicsMagick 1.0
Gentoo Linux 1.4
Gentoo Linux 1.2
Debian Linux 3.0 sparc
Debian Linux 3.0 s/390
Debian Linux 3.0 ppc
Debian Linux 3.0 mipsel
Debian Linux 3.0 mips
Debian Linux 3.0 m68k
Debian Linux 3.0 ia-64
Debian Linux 3.0 ia-32
Debian Linux 3.0 hppa
Debian Linux 3.0 arm
Debian Linux 3.0 alpha
Debian Linux 3.0
Compaq Tru64 5.1 b PK4 (BL25)
Compaq Tru64 5.1 b PK3(BL24)
Compaq Tru64 5.1 a PK6(BL24)
Avaya Network Routing
Apple Mac OS X Server 10.3.4
Apple Mac OS X Server 10.2.8
Apple Mac OS X 10.3.4
Apple Mac OS X 10.2.8
Adobe SVG Viewer 3.0 2
Adobe SVG Viewer 3.0 1
Adobe SVG Viewer 3.0
Not Vulnerable: Mozilla Thunderbird 0.7.3
Mozilla Firefox 0.9.3
Mozilla Browser 1.7.2
Microsoft Windows Messenger 5.1
GraphicsMagick GraphicsMagick 1.1.3
Apple Mac OS X Server 10.3.5
Apple Mac OS X 10.3.5
Adobe SVG Viewer 3.0 3


 

Privacy Statement
Copyright 2010, SecurityFocus