CVE-2004-0768

CVE-2004-0768 describes a buffer overflow vulnerability in libpng versions 1.2.5 and earlier, affecting products like greg_roelofs libpng3. This flaw stems from improper buffer offset calculations, potentially allowing remote attackers to execute arbitrary code. With a CVSS score of 7.5, it's considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, and no public exploit code or significant community discussion has been identified.