CVE-2007-5378

MEDIUM 4.3CVE-2007-5378 · Published 12/10/2007 · updated 16/06/2026

In short

CVE-2007-5378 is a MEDIUM (CVSS 4.3) vulnerability affecting tk toolkit (tcl tk).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tk toolkit tcl_tk	`≤ 8.3.5≤ 8.4.12`	No fix yet

Description

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers the overflow in the ReadImage function, a different vulnerability than CVE-2007-5137.

References

secunia.com/advisories/27207
secunia.com/advisories/27295
secunia.com/advisories/27801
secunia.com/advisories/27806
secunia.com/advisories/29070
secunia.com/advisories/30129
secunia.com/advisories/30535
secunia.com/advisories/34297
sunsolve.sun.com/search/document.do
attrition.org/pipermail/vim/2007-October/001826.html
debian.org/security/2007/dsa-1415
debian.org/security/2007/dsa-1416
debian.org/security/2009/dsa-1743
mandriva.com/security/advisories
redhat.com/support/errata/RHSA-2008-0134.html
redhat.com/support/errata/RHSA-2008-0135.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free