CVE-2004-0421

CVE-2004-0421 describes a denial-of-service vulnerability in libpng versions 1.0.15 and earlier, affecting products like OpenPKG and Red Hat. An attacker can crash systems by providing a malformed PNG image, leading to an out-of-bounds read during error message generation. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, resulting in a partial availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.