CVE-2007-5378 Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via...
MediumCVSS 4.3
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers the overflow in the ReadImage function, a different vulnerability than CVE-2007-5137.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tcl tk tk toolkit | <= 8.3.5 | No fix listed |
| tcl tk tk toolkit | <= 8.4.12 | No fix listed |
| debian/libtk-img(Debian:12) | < 1.3-release-8 | 1.3-release-8 |
| debian/libtk-img(Debian:13) | < 1.3-release-8 | 1.3-release-8 |
| debian/libtk-img(Debian:14) | < 1.3-release-8 | 1.3-release-8 |
References
- 27207 third-party-advisory
- 27295 third-party-advisory
- 27801 third-party-advisory
- 27806 third-party-advisory
- 29070 third-party-advisory
- 30129 third-party-advisory
- 30535 third-party-advisory
- 34297 third-party-advisory
- 237465 vendor-advisory
- 20071012 clarification on multiple Tk overflow issues mailing-list
- DSA-1415 vendor-advisory
- DSA-1416 vendor-advisory
- DSA-1743 vendor-advisory
- MDKSA-2007:200 vendor-advisory
- RHSA-2008:0134 vendor-advisory
- RHSA-2008:0135 vendor-advisory
- 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues mailing-list
- 26056 vdb-entry
- USN-529-1 vendor-advisory
- www.vmware.com
- ADV-2008-1456 vdb-entry
- ADV-2008-1744 vdb-entry
- tktoolkit-filereadgif-dos(37189) vdb-entry
- oval:org.mitre.oval:def:9480 signature vdb-entry
- sourceforge.net
- Debian Security Tracker CVE-2007-5378 vendor-advisory