6.8
CVE-2008-0553
- EPSS 4.25%
- Veröffentlicht 07.02.2008 21:00:00
- Zuletzt bearbeitet 16.06.2026 22:49:51
- Erkennungen
LoginStack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.25% | 0.898 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
http://secunia.com/advisories/30535
http://www.securityfocus.com/archive/1/493080/100/0/threaded
http://www.vmware.com/security/advisories/VMSA-2008-0009.html
http://www.vupen.com/english/advisories/2008/1744
http://secunia.com/advisories/30717
http://www.novell.com/linux/security/advisories/2008_13_sr.html
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
http://secunia.com/advisories/29622
http://secunia.com/advisories/29069
http://www.redhat.com/support/errata/RHSA-2008-0136.html
http://secunia.com/advisories/29070
http://secunia.com/advisories/30129
http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1
http://www.redhat.com/support/errata/RHSA-2008-0134.html
http://www.redhat.com/support/errata/RHSA-2008-0135.html
http://www.vupen.com/english/advisories/2008/1456/references
http://secunia.com/advisories/28784
http://secunia.com/advisories/28807
http://secunia.com/advisories/28848
http://secunia.com/advisories/28857
http://secunia.com/advisories/28867
http://secunia.com/advisories/28954
http://secunia.com/advisories/30188
http://secunia.com/advisories/30783
http://secunia.com/advisories/32608
http://securitytracker.com/id?1019309
http://sourceforge.net/project/shownotes.php?release_id=573933&group_id=10894
http://ubuntu.com/usn/usn-664-1
http://wiki.rpath.com/Advisories:rPSA-2008-0054
http://www.debian.org/security/2008/dsa-1490
http://www.debian.org/security/2008/dsa-1491
http://www.debian.org/security/2008/dsa-1598
http://www.mandriva.com/security/advisories?name=MDVSA-2008:041
http://www.securityfocus.com/archive/1/488069/100/0/threaded
http://www.securityfocus.com/bid/27655
http://www.vupen.com/english/advisories/2008/0430
https://bugzilla.redhat.com/show_bug.cgi?id=431518
https://issues.rpath.com/browse/RPL-2215
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10098
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00115.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00132.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00193.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00205.html
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00116.html