Red Hat Security AdvisoryRHSA-2008:0136
tk security update
Released 2008-02-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) tk-8.4.13-5.el5_1.1, tk-8.4.13-5.el5_1.1.i386, tk-8.4.13-5.el5_1.1.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) tk-8.4.13-5.el5_1.1, tk-8.4.13-5.el5_1.1.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) tk-8.4.13-5.el5_1.1, tk-devel-8.4.13-5.el5_1.1, tk-devel-8.4.13-5.el5_1.1.i386
Fixes 2 records
Priority LOW 38
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are small…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04855 · Published 2007-09-28 · Fixed CWE-119
Priority LOW 37
Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04246 · Published 2008-02-07 · Fixed CWE-119
