Fedora Update for tk FEDORA-2008-1122

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for tk FEDORA-2008-1131

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

PNPHPBB2 1.2i - ModName Multiple Local File Inclusions

PNPHPBB2 1.2i - ModName Multiple Local File Inclusions !/usr/bin/perl PNphpBB2 'E4E4E4'; $obj-title$poc; $obj-minsize500,200; $obj-maxsize500,200; text'Host/Path ex: http://localhost/cms'; input1; text'Local File ex: ../../../../../etc/passwd'; input2; button; Button; print $host; sub text my $lo...

Gentoo Security Advisory GLSA 200710-07 (tk)

The remote host is missing updates announced in advisory GLSA 200710-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200710-07 (tk)

The remote host is missing updates announced in advisory GLSA 200710-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: tcl, tcl-threads

The remote host is missing an update to the system as announced in the referenced advisory. VID a058d6fa-7325-11dc-ae10-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: tcl, tcl-threads

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 1598-1 (libtk-img)

The remote host is missing an update to libtk-img announced via advisory DSA 1598-1. OpenVAS Vulnerability Test $Id: deb15981.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1598-1 libtk-img Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

TCL/TK Tk工具包ReadImage()函数GIF文件解析栈溢出漏洞

BUGTRAQ ID: 27655 CVECAN ID: CVE-2008-0553 Tcl是一种简明，高效，可移植的编程语言。 在Tcl的Tk工具包中，tkImgGIF.c文件的ReadImage函数没有正确地验证从GIF图形中所读取的initialCodeSize值。如果用户受骗打开了恶意的GIF图形文件的话，就可能触发栈溢出，导致执行任意指令。 John Ousterhout Tcl 8.5.1 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1491-1）以及相应补丁: DSA-1491-1：New tk8.4 packages fix...

Debian DSA-1598-1 : libtk-img - buffer overflow

It was discovered that a buffer overflow in the GIF image parsing code of Tk, a cross-platform graphical toolkit, could lead to denial of service and potentially the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

[SECURITY] [DSA 1598-1] New libtk-img packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1598-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 19, 2008 http://www.debian.org/security/faq -...

DSA-1598-1 libtk-img - arbitrary code execution

Bulletin has no description...

Unfixed XSS vulnerability at www.granturismo4.tk

Security researcher xylitol, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting www.granturismo4.tk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/09/2008. It is currentl...

[SECURITY] Fedora 7 Update: tkimg-1.3-0.8.20080505svn.fc7

This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps. The provided format handlers include bmp, gif, ico, jpeg, pcx, png, ppm, ps, sgi, sun, tga, tiff, xbm, and xpm...

openSUSE 10 Security Update : tk (tk-4973)

Specially crafted GIF images could cause a buffer overflow and crash tk. It seems unlikely but not entirely impossible that this overflow can be exploited to execute arbitrary code CVE-2008-0553. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SuSE 10 Security Update : Tk (ZYPP Patch Number 4974)

Specially crafted GIF images could cause a buffer overflow and crash tk. It seems unlikely but not entirely impossible that this overflow can be exploited to execute arbitrary code. CVE-2008-0553 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell,...

openSUSE 10 Security Update : perl-Tk (perl-Tk-5035)

Specially crafted GIF files could crash perl-Tk CVE-2006-4484. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update perl-Tk-5035. The text description of this plugin is C SUSE LLC...

SuSE 10 Security Update : perl-Tk (ZYPP Patch Number 5034)

Specially crafted GIF files could crash perl-Tk. CVE-2006-4484 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31339; scriptversion"1.16";...

CentOS 3 : tcltk (CESA-2008:0134)

Updated tcltk packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tcl is a scripting language designed for embedding into other applications and for use...

RHEL 2.1 / 3 : tcltk (RHSA-2008:0134)

Updated tcltk packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tcl is a scripting language designed for embedding into other applications and for use...