CVE-2007-5378

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers the overflow in the ReadImage function, a different vulnerability than CVE-2007-5137.

🔗 References (50)

• security@ubuntuhttp://secunia.com/advisories/27207
• security@ubuntuhttp://secunia.com/advisories/27295
• security@ubuntuhttp://secunia.com/advisories/27801
• security@ubuntuhttp://secunia.com/advisories/27806
• security@ubuntuhttp://secunia.com/advisories/29070
• security@ubuntuhttp://secunia.com/advisories/30129
• security@ubuntuhttp://secunia.com/advisories/30535
• security@ubuntuhttp://secunia.com/advisories/34297
• security@ubuntuhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1
• security@ubuntuhttp://www.attrition.org/pipermail/vim/2007-October/001826.html
• security@ubuntuhttp://www.debian.org/security/2007/dsa-1415
• security@ubuntuhttp://www.debian.org/security/2007/dsa-1416
• security@ubuntuhttp://www.debian.org/security/2009/dsa-1743
• security@ubuntuhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:200
• security@ubuntuhttp://www.redhat.com/support/errata/RHSA-2008-0134.html