Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-5378
HistoryOct 11, 2007 - 12:00 a.m.

CVE-2007-5378

2007-10-1100:00:00
ubuntu.com
ubuntu.com
12

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.012 Low

EPSS

Percentile

85.3%

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit
8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers
to cause a denial of service (segmentation fault) via an animated GIF in
which the first subimage is smaller than a subsequent subimage, which
triggers the overflow in the ReadImage function, a different vulnerability
than CVE-2007-5137.

OSVersionArchitecturePackageVersionFilename
ubuntu8.10noarchlibtk-img< 1:1.3-release-7+lenny1build0.8.10.1UNKNOWN
ubuntu6.06noarchtk8.3< 8.3.5-4ubuntu1.1UNKNOWN
ubuntu6.10noarchtk8.3< 8.3.5-6ubuntu1.1UNKNOWN
ubuntu7.04noarchtk8.3< 8.3.5-6ubuntu2.1UNKNOWN
ubuntu7.10noarchtk8.3< 8.3.5-6ubuntu3UNKNOWN
ubuntu6.06noarchtk8.4< 8.4.12-0ubuntu1.1UNKNOWN
ubuntu6.10noarchtk8.4< 8.4.12-1ubuntu0.1UNKNOWN
ubuntu7.04noarchtk8.4< 8.4.14-0ubuntu2.1UNKNOWN
ubuntu7.10noarchtk8.4< 8.4.15-1ubuntu1UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.012 Low

EPSS

Percentile

85.3%