| Package | Affected versions | Patched versions |
|---|---|---|
| tcl tk | = 2.1= 3.3= 4.0p1= 6.1= 6.1p1= 6.2= 6.4= 6.5= 6.6= 6.7= 7.0= 7.1= 7.3= 7.4= 7.5= 7.5p1= 7.6= 7.6p2= 8.0= 8.0.3= 8.0.4= 8.0.5= 8.0p2= 8.1= 8.1.1= 8.2.0= 8.2.1= 8.2.2= 8.2.3= 8.3.0= 8.3.1= 8.3.2= 8.3.3= 8.3.4= 8.3.5= 8.4.0= 8.4.1= 8.4.10= 8.4.11= 8.4.12= 8.4.13= 8.4.14= 8.4.15= 8.4.16= 8.4.2= 8.4.3= 8.4.4= 8.4.5= 8.4.6= 8.4.7= 8.4.8= 8.4.9= 8.4a2= 8.4a3= 8.4a4= 8.4b1= 8.4b2= 8.5.0= 8.5_a3= 8.5a1= 8.5a2= 8.5a3= 8.5a4= 8.5a5= 8.5a6= 8.5b1= 8.5b2= 8.5b3≤ 8.4.17 |
Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free