Red Hat Security AdvisoryRHSA-2008:0135
tk security update
Released 2008-02-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 tk-8.4.7-3.el4_6.1, tk-8.4.7-3.el4_6.1.i386, tk-8.4.7-3.el4_6.1.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 tk-8.4.7-3.el4_6.1, tk-8.4.7-3.el4_6.1.i386, tk-devel-8.4.7-3.el4_6.1 +1
- Red Hat Enterprise Linux ES version 4 tk-8.4.7-3.el4_6.1, tk-8.4.7-3.el4_6.1.i386, tk-8.4.7-3.el4_6.1.ia64 +3
- Red Hat Enterprise Linux WS version 4 tk-8.4.7-3.el4_6.1, tk-8.4.7-3.el4_6.1.i386, tk-8.4.7-3.el4_6.1.ia64 +3
Fixes 2 records
Priority LOW 37
Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04246 · Published 2008-02-07 · Fixed CWE-119
Priority LOW 25
Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via an animated GIF in…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02643 · Published 2007-10-12 · Fixed CWE-119
