CVE-2004-0598

CVE-2004-0598 describes a denial-of-service vulnerability affecting libpng version 1.2.5 and earlier, specifically within the png_handle_iCCP function. An unauthenticated remote attacker can exploit this by providing a specially crafted PNG image, leading to an application crash due to a null dereference. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, resulting in a partial availability impact. There is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.