Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

tcl tcl tk vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2

CVE-2008-0553

Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) prior to 8.5.1 allows remote malicious users to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.
Tcl Tk Tcl Tk 6.2Tcl Tk Tcl Tk 7.6Tcl Tk Tcl Tk 8.4.8Tcl Tk Tcl Tk 8.5a3Tcl Tk Tcl Tk 8.4.2Tcl Tk Tcl Tk 8.4.1Tcl Tk Tcl Tk 8.0p2Tcl Tk Tcl Tk 6.7Tcl Tk Tcl Tk 8.4a2Tcl Tk Tcl Tk 8.3.4Tcl Tk Tcl Tk 6.1Tcl Tk Tcl TkTcl Tk Tcl Tk 8.4.5Tcl Tk Tcl Tk 7.4Tcl Tk Tcl Tk 8.4.3Tcl Tk Tcl Tk 8.4.0Tcl Tk Tcl Tk 8.5.0Tcl Tk Tcl Tk 8.0.4Tcl Tk Tcl Tk 8.4b1Tcl Tk Tcl Tk 8.4.11Tcl Tk Tcl Tk 8.5a2Tcl Tk Tcl Tk 8.5b2
6.8
CVSSv2

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 up to and including 8.4.15 allows remote malicious users to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due...
Tcl Tk Tcl Tk 8.4.13Tcl Tk Tcl Tk 8.4.15Tcl Tk Tcl Tk 8.4.14
7.2
CVSSv2

CVE-2007-2877

Buffer overflow in tcl/win/tclWinReg.c in Tcl (Tcl/Tk) prior to 8.5a6 allows local users to gain privileges via long registry key paths.
Tcl Tk Tcl Tk
4.3
CVSSv2

CVE-2007-5378

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and previous versions, and 8.3.5 and previous versions, allows user-assisted malicious users to cause a denial of service (segmentation fault) via an animated GIF in which the first subimage is smalle...
Tcl Tk Tk Toolkit
4
CVSSv2

CVE-2007-4772

The regular expression parser in TCL prior to 8.4.17, as used in PostgreSQL 8.2 prior to 8.2.6, 8.1 prior to 8.1.11, 8.0 prior to 8.0.15, and 7.4 prior to 7.4.19, allows context-dependent malicious users to cause a denial of service (infinite loop) via a crafted regular expressio...
Postgresql PostgresqlTcl Tcl/tkDebian Debian Linux 3.1Canonical Ubuntu Linux 6.06Canonical Ubuntu Linux 7.04Canonical Ubuntu Linux 7.10Canonical Ubuntu Linux 6.10
6.8
CVSSv2

CVE-2007-4769

The regular expression parser in TCL prior to 8.4.17, as used in PostgreSQL 8.2 prior to 8.2.6, 8.1 prior to 8.1.11, 8.0 prior to 8.0.15, and 7.4 prior to 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.
Postgresql Postgresql 7.4.16Postgresql Postgresql 8.0.7Postgresql Postgresql 8.0.2Postgresql Postgresql 8.1.7Postgresql Postgresql 7.3.3Tcl Tk Tcl TkPostgresql Postgresql 8.2.4Postgresql Postgresql 7.3Postgresql Postgresql 8.0.9Postgresql Postgresql 7.4.1Postgresql Postgresql 7.3.9Postgresql Postgresql 7.3.10Postgresql Postgresql 8.2.2Postgresql Postgresql 8.1.3Postgresql Postgresql 7.4.14Postgresql Postgresql 7.4.6Postgresql Postgresql 7.4.11Postgresql Postgresql 7.3.16Postgresql Postgresql 8.0.3Postgresql Postgresql 7.3.15Postgresql Postgresql 7.4.7Postgresql Postgresql 7.3.11
6.8
CVSSv2

CVE-2007-6067

Algorithmic complexity vulnerability in the regular expression parser in TCL prior to 8.4.17, as used in PostgreSQL 8.2 prior to 8.2.6, 8.1 prior to 8.1.11, 8.0 prior to 8.0.15, and 7.4 prior to 7.4.19, allows remote authenticated users to cause a denial of service (memory consum...
Postgresql Postgresql 7.4.16Postgresql Postgresql 8.0.7Postgresql Postgresql 8.0.2Postgresql Postgresql 8.1.7Postgresql Postgresql 7.3.3Tcl Tk Tcl TkPostgresql Postgresql 8.2.4Postgresql Postgresql 7.3Postgresql Postgresql 8.0.9Postgresql Postgresql 7.4.1Postgresql Postgresql 7.3.9Postgresql Postgresql 7.3.10Postgresql Postgresql 8.2.2Postgresql Postgresql 8.1.3Postgresql Postgresql 7.4.14Postgresql Postgresql 7.4.6Postgresql Postgresql 7.4.11Postgresql Postgresql 7.3.16Postgresql Postgresql 8.0.3Postgresql Postgresql 7.3.15Postgresql Postgresql 7.4.7Postgresql Postgresql 7.3.11
4.6
CVSSv2

CVE-2001-1375

tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory.
Conectiva Linux 6.0Conectiva Linux 7.0Redhat Linux 7.0
NA

CVE-2022-41953

Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line. Git GUI has a function to clone repositories. Immediately after the local clone is available, Git GUI will automatically ...
Git-scm Git
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusionCVE-2023-38506CVE-2024-37198CVE-2023-45197CVE-2024-38621CVE-2024-30103elevation of privilegeCVE-2024-0044IMAP
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook