CVE-2008-0553

Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.
Severity
UNKNOWN
AV:N/AC:M/Au:N/C:P/I:P/A:P
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
VendorProductVersion
tcl_tktcl_tk
𝑥
≤ 8.4.17
tcl_tktcl_tk
2.1
tcl_tktcl_tk
3.3
tcl_tktcl_tk
4.0p1
tcl_tktcl_tk
6.1
tcl_tktcl_tk
6.1p1
tcl_tktcl_tk
6.2
tcl_tktcl_tk
6.4
tcl_tktcl_tk
6.5
tcl_tktcl_tk
6.6
tcl_tktcl_tk
6.7
tcl_tktcl_tk
7.0
tcl_tktcl_tk
7.1
tcl_tktcl_tk
7.3
tcl_tktcl_tk
7.4
tcl_tktcl_tk
7.5
tcl_tktcl_tk
7.5p1
tcl_tktcl_tk
7.6
tcl_tktcl_tk
7.6p2
tcl_tktcl_tk
8.0
tcl_tktcl_tk
8.0.3
tcl_tktcl_tk
8.0.4
tcl_tktcl_tk
8.0.5
tcl_tktcl_tk
8.0p2
tcl_tktcl_tk
8.1
tcl_tktcl_tk
8.1.1
tcl_tktcl_tk
8.2.0
tcl_tktcl_tk
8.2.1
tcl_tktcl_tk
8.2.2
tcl_tktcl_tk
8.2.3
tcl_tktcl_tk
8.3.0
tcl_tktcl_tk
8.3.1
tcl_tktcl_tk
8.3.2
tcl_tktcl_tk
8.3.3
tcl_tktcl_tk
8.3.4
tcl_tktcl_tk
8.3.5
tcl_tktcl_tk
8.4.0
tcl_tktcl_tk
8.4.1
tcl_tktcl_tk
8.4.2
tcl_tktcl_tk
8.4.3
tcl_tktcl_tk
8.4.4
tcl_tktcl_tk
8.4.5
tcl_tktcl_tk
8.4.6
tcl_tktcl_tk
8.4.7
tcl_tktcl_tk
8.4.8
tcl_tktcl_tk
8.4.9
tcl_tktcl_tk
8.4.10
tcl_tktcl_tk
8.4.11
tcl_tktcl_tk
8.4.12
tcl_tktcl_tk
8.4.13
tcl_tktcl_tk
8.4.14
tcl_tktcl_tk
8.4.15
tcl_tktcl_tk
8.4.16
tcl_tktcl_tk
8.4a2
tcl_tktcl_tk
8.4a3
tcl_tktcl_tk
8.4a4
tcl_tktcl_tk
8.4b1
tcl_tktcl_tk
8.4b2
tcl_tktcl_tk
8.5.0
tcl_tktcl_tk
8.5_a3
tcl_tktcl_tk
8.5a1
tcl_tktcl_tk
8.5a2
tcl_tktcl_tk
8.5a3
tcl_tktcl_tk
8.5a4
tcl_tktcl_tk
8.5a5
tcl_tktcl_tk
8.5a6
tcl_tktcl_tk
8.5b1
tcl_tktcl_tk
8.5b2
tcl_tktcl_tk
8.5b3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libtk-img
bullseye
1:1.4.13+dfsg-1
fixed
bookworm
1:1.4.14+dfsg-2
fixed
sid
1:2.0.0+dfsg1-1
fixed
trixie
1:2.0.0+dfsg1-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tk8.0
intrepid
dne
hardy
dne
gutsy
dne
feisty
dne
edgy
dne
dapper
Fixed 8.0.5-11ubuntu0.1
released
tk8.3
intrepid
Fixed 8.3.5-12
released
hardy
Fixed 8.3.5-12
released
gutsy
Fixed 8.3.5-6ubuntu3.1
released
feisty
ignored
edgy
ignored
dapper
Fixed 8.3.5-4ubuntu1.2
released
tk8.4
intrepid
not-affected
hardy
Fixed 8.4.16-2ubuntu1.1
released
gutsy
Fixed 8.4.15-1ubuntu1.1
released
feisty
ignored
edgy
ignored
dapper
Fixed 8.4.12-0ubuntu1.2
released
tk8.5
intrepid
Fixed 8.5.0-3
released
hardy
Fixed 8.5.0-3
released
gutsy
dne
feisty
dne
edgy
dne
dapper
dne
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
http://secunia.com/advisories/28784
http://secunia.com/advisories/28807
http://secunia.com/advisories/28848
http://secunia.com/advisories/28857
http://secunia.com/advisories/28867
http://secunia.com/advisories/28954
http://secunia.com/advisories/29069
http://secunia.com/advisories/29070
http://secunia.com/advisories/29622
http://secunia.com/advisories/30129
http://secunia.com/advisories/30188
http://secunia.com/advisories/30535
http://secunia.com/advisories/30717
http://secunia.com/advisories/30783
http://secunia.com/advisories/32608
http://securitytracker.com/id?1019309
http://sourceforge.net/project/shownotes.php?release_id=573933&group_id=10894
http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1
http://ubuntu.com/usn/usn-664-1
http://wiki.rpath.com/Advisories:rPSA-2008-0054
http://www.debian.org/security/2008/dsa-1490
http://www.debian.org/security/2008/dsa-1491
http://www.debian.org/security/2008/dsa-1598
http://www.mandriva.com/security/advisories?name=MDVSA-2008:041
http://www.novell.com/linux/security/advisories/2008_13_sr.html
http://www.redhat.com/support/errata/RHSA-2008-0134.html
http://www.redhat.com/support/errata/RHSA-2008-0135.html
http://www.redhat.com/support/errata/RHSA-2008-0136.html
http://www.securityfocus.com/archive/1/488069/100/0/threaded
http://www.securityfocus.com/archive/1/493080/100/0/threaded
http://www.securityfocus.com/bid/27655
http://www.vmware.com/security/advisories/VMSA-2008-0009.html
http://www.vupen.com/english/advisories/2008/0430
http://www.vupen.com/english/advisories/2008/1456/references
http://www.vupen.com/english/advisories/2008/1744
https://bugzilla.redhat.com/show_bug.cgi?id=431518
https://issues.rpath.com/browse/RPL-2215
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10098
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00115.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00132.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00193.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00205.html
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00116.html
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
http://secunia.com/advisories/28784
http://secunia.com/advisories/28807
http://secunia.com/advisories/28848
http://secunia.com/advisories/28857
http://secunia.com/advisories/28867
http://secunia.com/advisories/28954
http://secunia.com/advisories/29069
http://secunia.com/advisories/29070
http://secunia.com/advisories/29622
http://secunia.com/advisories/30129
http://secunia.com/advisories/30188
http://secunia.com/advisories/30535
http://secunia.com/advisories/30717
http://secunia.com/advisories/30783
http://secunia.com/advisories/32608
http://securitytracker.com/id?1019309
http://sourceforge.net/project/shownotes.php?release_id=573933&group_id=10894
http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1
http://ubuntu.com/usn/usn-664-1
http://wiki.rpath.com/Advisories:rPSA-2008-0054
http://www.debian.org/security/2008/dsa-1490
http://www.debian.org/security/2008/dsa-1491
http://www.debian.org/security/2008/dsa-1598
http://www.mandriva.com/security/advisories?name=MDVSA-2008:041
http://www.novell.com/linux/security/advisories/2008_13_sr.html
http://www.redhat.com/support/errata/RHSA-2008-0134.html
http://www.redhat.com/support/errata/RHSA-2008-0135.html
http://www.redhat.com/support/errata/RHSA-2008-0136.html
http://www.securityfocus.com/archive/1/488069/100/0/threaded
http://www.securityfocus.com/archive/1/493080/100/0/threaded
http://www.securityfocus.com/bid/27655
http://www.vmware.com/security/advisories/VMSA-2008-0009.html
http://www.vupen.com/english/advisories/2008/0430
http://www.vupen.com/english/advisories/2008/1456/references
http://www.vupen.com/english/advisories/2008/1744
https://bugzilla.redhat.com/show_bug.cgi?id=431518
https://issues.rpath.com/browse/RPL-2215
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10098
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00115.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00132.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00193.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00205.html
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00116.html