SiteScape Forum TCL injection

Hi, I have following advisory for you. [email protected] SiteScape Forum TCL injection ================================ discovered by [email protected] PRODUCT: SiteScape Forum EXPOSURE: TCL injection SYNOPSIS ======== By URL modification it is possible to insert TCL code into aplication. Accou...

[SECURITY] Fedora 7 Update: eggdrop-1.6.18-12.fc7

Eggdrop is the world's most popular Open Source IRC bot, designed for flexibility and ease of use. It is extendable with Tcl scripts and/or C modules, has support for the big five IRC networks and is able to form botnets, share partylines and userfiles between bots...

Fedora 7 : tk-8.4.13-6.fc7 (2007-2564)

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk before 8.4.16 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. Note that Tenable Network Security has extracted the preceding...

FreeBSD : tcl/tk -- buffer overflow in ReadImage function (a058d6fa-7325-11dc-ae10-0016179b2dd5)

A Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl/Tk, allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

Buffer overflow

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-5137

The CVE-2007-5137 issue affects Tcl/Tk, specifically Tk’s GIF handling in ReadImage() (generic/tkImgGIF.c) for Tcl/Tk 8.4.13–8.4.15. The vulnerability is a buffer overflow triggered by interlaced/animated GIFs where later frames are smaller than the first, potentially enabling remote code executi...

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-5137: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

tcl/tk -- buffer overflow in ReadImage function

A Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl/Tk, allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first...

Buffer overflow

Buffer overflow in tcl/win/tclWinReg.c in Tcl Tcl/Tk before 8.5a6 allows local users to gain privileges via long registry key paths...

CVE-2007-2877

Buffer overflow in tcl/win/tclWinReg.c in Tcl Tcl/Tk before 8.5a6 allows local users to gain privileges via long registry key paths...

CVE-2007-2877

CVE-2007-2877 affects Tcl/Tk before 8.5a6. A buffer overflow in Tcl/Tk components (e.g., tclWinReg.c) can be exploited to gain privileges (local escalation) via crafted input (long registry key paths). A patch is to upgrade to 8.5a6 or later; the precise vulnerable component/filename varies by do...

CVE-2007-2877

Buffer overflow in tcl/win/tclWinReg.c in Tcl Tcl/Tk before 8.5a6 allows local users to gain privileges via long registry key paths...

CVE-2007-2877: Undefined Security Weakness

Buffer overflow in tcl/win/tclWinReg.c in Tcl Tcl/Tk before 8.5a6 allows local users to gain privileges via long registry key paths...

PT-2007-4179 · Tcl +1 · Tcltk +1

Name of the Vulnerable Software and Affected Versions: Tcl/Tk versions prior to 8.5a6 Description: A buffer overflow issue exists, allowing local users to gain privileges through long registry key paths. Recommendations: For versions prior to 8.5a6, update to version 8.5a6 or later to resolve the...

MDKA-2006:050 : ical

The Ical package in Mandriva Linux 2007 fails to run due to old code that does not work with current versions of TCL. Additionally, the application did not appear in the menu and the URL was obsolete. This updated package fixes these issues. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

CVE-2005-4784

Multiple buffer overflows in the POSIX readdirr function, as used in multiple packages, allow local users to cause a denial of service and possibly execute arbitrary code via 1 a symlink attack that exploits a race condition between opendir and pathcon calls and changes the filesystem to one with...