diff options
| author | Martin Wilke <miwi@FreeBSD.org> | 2007-10-05 09:35:49 +0000 |
|---|---|---|
| committer | Martin Wilke <miwi@FreeBSD.org> | 2007-10-05 09:35:49 +0000 |
| commit | 30f9615ad2b639df7165ca23679ffee849d6c970 (patch) | |
| tree | fb7fa1da267d0e5a1f81310531610595173aa79d /security/vuxml/vuln.xml | |
| parent | Update to 0.04003. (diff) | |
- Document tcl/tk -- buffer overflow in ReadImage function
PR: 116881
Submitted by: Nick Barkas <snb@threerings.net>
Reviewed by: simon
Notes
Notes:
svn path=/head/; revision=200905
Diffstat (limited to 'security/vuxml/vuln.xml')
| -rw-r--r-- | security/vuxml/vuln.xml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index d0dba96e5f7a..7ab94ca9102b 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,39 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="a058d6fa-7325-11dc-ae10-0016179b2dd5"> + <topic>tcl/tk -- buffer overflow in ReadImage function</topic> + <affects> + <package> + <name>tcl</name> + <name>tcl-threads</name> + <range><lt>8.4.16,1</lt></range> + </package> + <package> + <name>tk</name> + <name>tk-threads</name> + <range><lt>8.4.16,2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>A Buffer overflow in the ReadImage function in generic/tkImgGIF.c + in Tcl/Tk, allows remote attackers to execute arbitrary code via + multi-frame interlaced GIF files in which later frames are smaller + than the first.</p> + </body> + </description> + <references> + <url>http://secunia.com/advisories/26942</url> + <url>http://sourceforge.net/project/shownotes.php?release_id=541207</url> + <cvename>CVE-2007-5137</cvename> + </references> + <dates> + <discovery>2007-09-27</discovery> + <entry>2007-10-05</entry> + </dates> + </vuln> + <vuln vid="91ed69f9-72c7-11dc-981a-001921ab2fa4"> <topic>firebird -- multiple remote buffer overflow vulnerabilities</topic> <affects> |