CVE-2007-5137
- State
- Published
- Severity
- Not scored
- Published
- Sep 28, 2007
- Updated
- Aug 7, 2024
- Reserved
- Sep 28, 2007
Description
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for CVE-2007-5378.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 34297third-party-advisory
- oval:org.mitre.oval:def:9540vdb-entrysignature
- FEDORA-2007-2564vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=192539
- 26942third-party-advisory
- 27086third-party-advisory
- RHSA-2008:0136vendor-advisory
- MDKSA-2007:200vendor-advisory
- DSA-1743vendor-advisory
- GLSA-200710-07vendor-advisory
- 27295third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=541207
- 27229third-party-advisory
- USN-529-1vendor-advisory
- 27182third-party-advisory
- 20071012 clarification on multiple Tk overflow issuesmailing-list
- 29069third-party-advisory
- 27207third-party-advisory
- SUSE-SR:2007:020vendor-advisory
- 25826vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.