CVE-2002-0660 describes a buffer overflow vulnerability in libpng versions 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2, affecting Debian GNU/Linux 3.0 and potentially other operating systems. This flaw, distinct from CVE-2002-0728, carries a CVSS score of 7.5, indicating a high severity with network-based attacks possible without authentication. Successful exploitation could lead to denial of service and potentially arbitrary code execution. While no public exploit code (Metasploit, Nuclei, ExploitDB) is available and it's not in CISA's KEV catalog, the vulnerability has garnered significant community discussion, suggesting ongoing awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0.12CPE matchmatch criteria | cpe:2.3:a:greg_roelofs:libpng:1.0.12:*:*:*:*:*:*:* | ||
1.2.1CPE matchmatch criteria | cpe:2.3:a:greg_roelofs:libpng3:1.2.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.