NVD

Id
57443  
Name
CVE-2007-5378  
Description
Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers the overflow in the ReadImage function, a different vulnerability than CVE-2007-5137.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-10-11  
Modified Date
2011-03-07  
Seq
2007-5378  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
293745 57443 CVE-2007-5378 oval:org.mitre.oval:def:9480  View
293746 57443 CVE-2007-5378 237465  View
293747 57443 CVE-2007-5378 20071012 clarification on multiple Tk overflow issues  View
293748 57443 CVE-2007-5378 DSA-1415  View
293749 57443 CVE-2007-5378 DSA-1416  View
293750 57443 CVE-2007-5378 DSA-1743  View
293751 57443 CVE-2007-5378 MDKSA-2007:200  View
293752 57443 CVE-2007-5378 RHSA-2008:0134  View
293753 57443 CVE-2007-5378 RHSA-2008:0135  View
293754 57443 CVE-2007-5378 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues  View
293755 57443 CVE-2007-5378 26056  View
293756 57443 CVE-2007-5378 USN-529-1  View
293757 57443 CVE-2007-5378 http://www.vmware.com/security/advisories/VMSA-2008-0009.html  View
293758 57443 CVE-2007-5378 ADV-2008-1456  View
293759 57443 CVE-2007-5378 ADV-2008-1744  View
293760 57443 CVE-2007-5378 tktoolkit-filereadgif-dos(37189)  View
293761 57443 CVE-2007-5378 https://sourceforge.net/tracker/?func=detail&atid=112997&aid=1458234&group_id=12997  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52438 JVNDB-2007-001130 Tk Toolkit の FileReadGIF() 関数におけるバッファオーバーフローの脆弱性 Tk Toolkit の tkImgGIF.c における FileReadGIF() 関数には、アニメーション GIF ファイルの処理に不備が存在するため、開始サブイメージのサイズがそれ以降のサブイメージよりも小さいアニメーション GIF ファイルを処理した場合、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-5378 28733 CVE-2007-5378 57443 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001130.html 2007-10-11 2008-05-21 View