CVE-2001-1375

CVE-2001-1375 affects tcl/tk (tcltk) 8.3.1, where libraries may be searched in the current working directory before others. This could allow a local user to execute arbitrary code by placing a Trojan library in a user-controlled directory. The Mandrake advisory notes a related issue and indicates...

PT-2007-7486 · Debian +3 · Debian +3

Name of the Vulnerable Software and Affected Versions: Tcl/Tk versions 8.4.13 through 8.4.15 Description: The issue is related to a buffer overflow in the ReadImage function, which can be exploited by remote attackers using multi-frame interlaced GIF files where later frames are smaller than the...