tk: GIF handling buffer overflow

🗓️ 21 Feb 2008 21:03:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 6 Views

ReadImage function in graphic image handling is vulnerable to stack overflow enabling remote code execution on Unix before 8.5.1.

Reporter	Title	Published	Views	Family All 150
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	2.1	i386	expect	0:5.38.0-75	expect-0:5.38.0-75.i386.rpm
Red Hat Enterprise Linux	2.1	ia64	expect	0:5.38.0-75	expect-0:5.38.0-75.ia64.rpm
Red Hat Enterprise Linux	3	i386	expect	0:5.38.0-92.8	expect-0:5.38.0-92.8.i386.rpm
Red Hat Enterprise Linux	3	ia64	expect	0:5.38.0-92.8	expect-0:5.38.0-92.8.ia64.rpm
Red Hat Enterprise Linux	3	ppc	expect	0:5.38.0-92.8	expect-0:5.38.0-92.8.ppc.rpm
Red Hat Enterprise Linux	3	s390	expect	0:5.38.0-92.8	expect-0:5.38.0-92.8.s390.rpm
Red Hat Enterprise Linux	3	s390x	expect	0:5.38.0-92.8	expect-0:5.38.0-92.8.s390x.rpm
Red Hat Enterprise Linux	3	x86_64	expect	0:5.38.0-92.8	expect-0:5.38.0-92.8.x86_64.rpm
Red Hat Enterprise Linux	3	i386	expect-devel	0:5.38.0-92.8	expect-devel-0:5.38.0-92.8.i386.rpm
Red Hat Enterprise Linux	3	ia64	expect-devel	0:5.38.0-92.8	expect-devel-0:5.38.0-92.8.ia64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2008-0553
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2008-0553
cve	www.cve.org/CVERecord

27 Jun 2026 18:19Current

8High risk

Vulners AI Score8

CVSS 26.8

EPSS0.04246

readimage function graphic image handling buffer overflow remote code execution unix platform