CVE-2007-5378

Published: Oct 12, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers the overflow in the ReadImage function, a different vulnerability than CVE-2007-5137.

Affected (2)

Products: Tcl Tk: Tk Toolkit

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Tcl Tk Tk Toolkit	Up to 8.3.5
Tcl Tk Tk Toolkit	Up to 8.4.12

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (50)

http://secunia.com/advisories/27207

Source: security@ubuntu.com

http://secunia.com/advisories/27295

Source: security@ubuntu.com

http://secunia.com/advisories/27801

Source: security@ubuntu.com

http://secunia.com/advisories/27806

Source: security@ubuntu.com

http://secunia.com/advisories/29070

Source: security@ubuntu.com

http://secunia.com/advisories/30129

Source: security@ubuntu.com

http://secunia.com/advisories/30535

Source: security@ubuntu.com

http://secunia.com/advisories/34297

Source: security@ubuntu.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1

Source: security@ubuntu.com

http://www.attrition.org/pipermail/vim/2007-October/001826.html

Source: security@ubuntu.com

http://www.debian.org/security/2007/dsa-1415

Source: security@ubuntu.com

http://www.debian.org/security/2007/dsa-1416

Source: security@ubuntu.com

http://www.debian.org/security/2009/dsa-1743

Source: security@ubuntu.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:200

Source: security@ubuntu.com

http://www.redhat.com/support/errata/RHSA-2008-0134.html

Source: security@ubuntu.com

http://www.redhat.com/support/errata/RHSA-2008-0135.html

Source: security@ubuntu.com

http://www.securityfocus.com/archive/1/493080/100/0/threaded

Source: security@ubuntu.com

http://www.securityfocus.com/bid/26056

Source: security@ubuntu.com

http://www.ubuntu.com/usn/usn-529-1

Source: security@ubuntu.com

http://www.vmware.com/security/advisories/VMSA-2008-0009.html

Source: security@ubuntu.com

http://www.vupen.com/english/advisories/2008/1456/references

Source: security@ubuntu.com

http://www.vupen.com/english/advisories/2008/1744

Source: security@ubuntu.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/37189

Source: security@ubuntu.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9480

Source: security@ubuntu.com

https://sourceforge.net/tracker/?func=detail&atid=112997&aid=1458234&group_id=12997

Source: security@ubuntu.com

http://secunia.com/advisories/27207

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27295

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27801

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27806

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29070

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30129

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30535

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34297

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.attrition.org/pipermail/vim/2007-October/001826.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1415

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1416

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1743

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:200

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0134.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0135.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/493080/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/26056

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-529-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2008-0009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/1456/references

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/1744

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/37189

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9480

Source: af854a3a-2127-422b-91ae-364da2661108

https://sourceforge.net/tracker/?func=detail&atid=112997&aid=1458234&group_id=12997

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.