Moderate: tcltk security update

8.3.5-92.8 - CVE-2008-0553 CVE-2007-5378 CVE-2007-4772 - problems: regexp, GIF overflow and also GIF overflow Resolves: 432511...

Design/Logic Flaw

Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service crash via a crafted 1 bitmap BMP or 2 GIF file, a related issue to CVE-2008-0420...

Tk GIF processing buffer overflow

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

Moderate: Red Hat Security Advisory: tk security update

Updated tk packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tk is a graphical toolkit for the Tcl scripting language. An input validation flaw was discovered in...

Tk GIF processing buffer overflow

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service segmentation fault via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers...

Moderate: Red Hat Security Advisory: tk security update

Updated tk packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 22 February 2008 The packages in this errata were originally pushed to the wrong Red Hat...

tk: GIF handling buffer overflow

Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk Tcl/Tk before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484...

Moderate: Red Hat Security Advisory: tcltk security update

Updated tcltk packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tcl is a scripting language designed for embedding into other applications and for use...

Tk GIF processing buffer overflow

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service segmentation fault via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers...

CVE-2008-0894

Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service crash via a crafted 1 bitmap BMP or 2 GIF file, a related issue to CVE-2008-0420...

CVE-2008-0894

CVE-2008-0894 concerns Apple Safari where remote attackers could obtain potentially sensitive memory contents or trigger a crash through crafted BMP or GIF images; it is related to CVE-2008-0420. The connected documents do not provide specific exploit details, affected subversions, or remediation...

Moderate: tk security update

8.4.13-5.EL51.1 - CVE-2008-0553 CVE-2007-5378 - GIF overflow and also GIF overflow Resolves: rhbz432514...

CVE-2008-0894: Undefined Security Weakness

Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service crash via a crafted 1 bitmap BMP or 2 GIF file, a related issue to CVE-2008-0420...

Debian Security Advisory DSA 1490-1 (tk8.3)

The remote host is missing an update to tk8.3 announced via advisory DSA 1490-1. OpenVAS Vulnerability Test $Id: deb14901.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1490-1 tk8.3 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1490-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1491-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1493-1 (sdl-image1.2)

The remote host is missing an update to sdl-image1.2 announced via advisory DSA 1493-1. OpenVAS Vulnerability Test $Id: deb14931.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1493-1 sdl-image1.2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

CVE-2008-0758

Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary 1 gif, 2 png, 3 jpg, 4 xml, 5 ico, 6 zip, and 7 html files via a ".." dot dot backslash sequence in the filename...

CVE-2008-0758

Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary 1 gif, 2 png, 3 jpg, 4 xml, 5 ico, 6 zip, and 7 html files via a ".." dot dot backslash sequence in the filename...

Debian DSA-1491-1 : tk8.4 - buffer overflow

It was discovered that a buffer overflow in the GIF image parsing code of Tk, a cross-platform graphical toolkit, could lead to a denial of service and potentially the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...