CVE-2008-0553 Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4...
MediumCVSS 6.8
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tcl tk | <= 8.4.17 | No fix listed |
| tcl tk | = 2.1 | No fix listed |
| tcl tk | = 3.3 | No fix listed |
| tcl tk | = 4.0p1 | No fix listed |
| tcl tk | = 6.1 | No fix listed |
| tcl tk | = 6.1p1 | No fix listed |
| tcl tk | = 6.2 | No fix listed |
| tcl tk | = 6.4 | No fix listed |
| tcl tk | = 6.5 | No fix listed |
| tcl tk | = 6.6 | No fix listed |
| tcl tk | = 6.7 | No fix listed |
| tcl tk | = 7.0 | No fix listed |
| tcl tk | = 7.1 | No fix listed |
| tcl tk | = 7.3 | No fix listed |
| tcl tk | = 7.4 | No fix listed |
| tcl tk | = 7.5 | No fix listed |
| tcl tk | = 7.5p1 | No fix listed |
| tcl tk | = 7.6 | No fix listed |
| tcl tk | = 7.6p2 | No fix listed |
| tcl tk | = 8.0 | No fix listed |
| tcl tk | = 8.0.3 | No fix listed |
| tcl tk | = 8.0.4 | No fix listed |
| tcl tk | = 8.0.5 | No fix listed |
| tcl tk | = 8.0p2 | No fix listed |
| tcl tk | = 8.1 | No fix listed |
Show 47 more
| Product | Affected versions | Fixed in |
|---|---|---|
| tcl tk | = 8.1.1 | No fix listed |
| tcl tk | = 8.2.0 | No fix listed |
| tcl tk | = 8.2.1 | No fix listed |
| tcl tk | = 8.2.2 | No fix listed |
| tcl tk | = 8.2.3 | No fix listed |
| tcl tk | = 8.3.0 | No fix listed |
| tcl tk | = 8.3.1 | No fix listed |
| tcl tk | = 8.3.2 | No fix listed |
| tcl tk | = 8.3.3 | No fix listed |
| tcl tk | = 8.3.4 | No fix listed |
| tcl tk | = 8.3.5 | No fix listed |
| tcl tk | = 8.4.0 | No fix listed |
| tcl tk | = 8.4.1 | No fix listed |
| tcl tk | = 8.4.2 | No fix listed |
| tcl tk | = 8.4.3 | No fix listed |
| tcl tk | = 8.4.4 | No fix listed |
| tcl tk | = 8.4.5 | No fix listed |
| tcl tk | = 8.4.6 | No fix listed |
| tcl tk | = 8.4.7 | No fix listed |
| tcl tk | = 8.4.8 | No fix listed |
| tcl tk | = 8.4.9 | No fix listed |
| tcl tk | = 8.4.10 | No fix listed |
| tcl tk | = 8.4.11 | No fix listed |
| tcl tk | = 8.4.12 | No fix listed |
| tcl tk | = 8.4.13 | No fix listed |
| tcl tk | = 8.4.14 | No fix listed |
| tcl tk | = 8.4.15 | No fix listed |
| tcl tk | = 8.4.16 | No fix listed |
| tcl tk | = 8.4a2 | No fix listed |
| tcl tk | = 8.4a3 | No fix listed |
| tcl tk | = 8.4a4 | No fix listed |
| tcl tk | = 8.4b1 | No fix listed |
| tcl tk | = 8.4b2 | No fix listed |
| tcl tk | = 8.5.0 | No fix listed |
| tcl tk | = 8.5_a3 | No fix listed |
| tcl tk | = 8.5a1 | No fix listed |
| tcl tk | = 8.5a2 | No fix listed |
| tcl tk | = 8.5a3 | No fix listed |
| tcl tk | = 8.5a4 | No fix listed |
| tcl tk | = 8.5a5 | No fix listed |
| tcl tk | = 8.5a6 | No fix listed |
| tcl tk | = 8.5b1 | No fix listed |
| tcl tk | = 8.5b2 | No fix listed |
| tcl tk | = 8.5b3 | No fix listed |
| debian/libtk-img(Debian:12) | < 1:1.3-release-7 | 1:1.3-release-7 |
| debian/libtk-img(Debian:13) | < 1:1.3-release-7 | 1:1.3-release-7 |
| debian/libtk-img(Debian:14) | < 1:1.3-release-7 | 1:1.3-release-7 |
References
- SUSE-SR:2008:008 vendor-advisory
- 28784 patch third-party-advisory vendor-advisory
- 28807 third-party-advisory vendor-advisory
- 28848 third-party-advisory vendor-advisory
- 28857 third-party-advisory vendor-advisory
- 28867 third-party-advisory vendor-advisory
- 28954 third-party-advisory vendor-advisory
- 29069 third-party-advisory vendor-advisory
- 29070 third-party-advisory vendor-advisory
- 29622 third-party-advisory vendor-advisory
- 30129 third-party-advisory vendor-advisory
- 30188 third-party-advisory vendor-advisory
- 30535 third-party-advisory vendor-advisory
- 30717 third-party-advisory vendor-advisory
- 30783 third-party-advisory vendor-advisory
- 32608 third-party-advisory
- 1019309 vdb-entry
- sourceforge.net
- 237465 vendor-advisory
- USN-664-1 vendor-advisory
- wiki.rpath.com
- DSA-1490 vendor-advisory
- DSA-1491 vendor-advisory
- DSA-1598 vendor-advisory
- MDVSA-2008:041 vendor-advisory
- SUSE-SR:2008:013 vendor-advisory
- RHSA-2008:0134 vendor-advisory
- RHSA-2008:0135 vendor-advisory
- RHSA-2008:0136 vendor-advisory
- 20080212 rPSA-2008-0054-1 tk mailing-list
- 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues mailing-list
- 27655 patch vdb-entry
- www.vmware.com
- ADV-2008-0430 vdb-entry vendor-advisory
- ADV-2008-1456 vdb-entry vendor-advisory
- ADV-2008-1744 vdb-entry vendor-advisory
- bugzilla.redhat.com
- issues.rpath.com
- oval:org.mitre.oval:def:10098 signature vdb-entry
- FEDORA-2008-1323 vendor-advisory
- FEDORA-2008-1131 vendor-advisory
- FEDORA-2008-1122 vendor-advisory
- FEDORA-2008-1384 vendor-advisory
- FEDORA-2008-3545 vendor-advisory
- Debian Security Tracker CVE-2008-0553 vendor-advisory
- bugs.debian.org issue-tracking