USN-529-1: Tk vulnerability

It was discovered that Tk could be made to overrun a buffer when loading certain images. If a user were tricked into opening a specially crafted GIF image, remote attackers could cause a denial of service or execute arbitrary code with user privileges...

CVE-2007-5378

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service segmentation fault via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers...

GLSA-200710-07 : Tk: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200710-07 Tk: Buffer overflow Reinhard Max discovered a boundary error in Tk when processing an interlaced GIF with two frames where the second is smaller than the first one. Impact : A remote attacker could entice a user to open ...

FreeBSD : tcl/tk -- buffer overflow in ReadImage function (a058d6fa-7325-11dc-ae10-0016179b2dd5)

A Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl/Tk, allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

Tk: Buffer overflow

Background Tk is a toolkit for creating graphical user interfaces. Description Reinhard Max discovered a boundary error in Tk when processing an interlaced GIF with two frames where the second is smaller than the first one. Impact A remote attacker could entice a user to open a specially crafted...

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

tcl/tk -- buffer overflow in ReadImage function

A Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl/Tk, allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first...

CVE-2006-3974

Cross-site scripting XSS vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 allows remote attackers to inject arbitrary web script or HTML via the tk parameter...

Buffer overflow

Buffer overflow in tcl/win/tclWinReg.c in Tcl Tcl/Tk before 8.5a6 allows local users to gain privileges via long registry key paths...

CVE-2007-2877

Buffer overflow in tcl/win/tclWinReg.c in Tcl Tcl/Tk before 8.5a6 allows local users to gain privileges via long registry key paths...

CVE-2007-2877

Buffer overflow in tcl/win/tclWinReg.c in Tcl Tcl/Tk before 8.5a6 allows local users to gain privileges via long registry key paths...

PT-2007-4179 · Tcl +1 · Tcltk +1

Name of the Vulnerable Software and Affected Versions: Tcl/Tk versions prior to 8.5a6 Description: A buffer overflow issue exists, allowing local users to gain privileges through long registry key paths. Recommendations: For versions prior to 8.5a6, update to version 8.5a6 or later to resolve the...

Mambo Module Flatmenu <= 1.07 Remote File Include Exploit

Exploit for unknown platform in category web applications ========================================================= Mambo Module Flatmenu "Team Hell Crew :: Mambo 4.5.1 Modules Flatmenu geometry '500x300' ; $mw-resizable0,0; $mw-Label-text = 'Mambo 4.5.1 Modules Flatmenu 'Verdana 7...

PHP Polling Creator 1.03 - functions.inc.php Remote File Inclusion

PHP Polling Creator 1.03 - functions.inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/20398/info PHP Polling Creator is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issu...

PHPPC 1.03 RC1 - libfunctions.inc.php Remote File Inclusion

PHPPC 1.03 RC1 - libfunctions.inc.php Remote File Inclusion !/usr/bin/perl + + - - - xp10 TEAM THE BEST POLISH TEAM - - + + + - phpPC "wolf TEAM :: phpPC 1.03 Remote File Include Exploit :: by the-wolf-ksa ;- " ; $mw-geometry '500x300' ; $mw-resizable0,0; $mw-Label-text = 'phpPC 1.03 RC1 Remote...

Invision Power Board 2.1 2.1.6 - SQL Injection (1)

Invision Power Board 2.1 2.1.6 - SQL Injection 1 !/usr/bin/perl Invision Power Board v2.1 "r57ipb216gui" ; $mw-geometry '420x550' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Power Board 2.1. 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-te...

Mandrake Linux Security Advisory : tcltk (MDKSA-2002:060)

Some problems were discovered with the Tcl/Tk development environment. The expect application would search for its libraries in /var/tmp prior to searching in other directories, which could allow a local user to gain root privilege by writing a trojan library and waiting for the root user to run...