Buffer overflow in Tcl Tk

CVE-2008-0553

Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.

Vulnerability class: Buffer Overflow

EPSS: 0.042 (90.0th percentile) — read the EPSS interpretation.

Affected products

  • Tcl_tk — versions 2.1, 3.3, 4.0p1
  • N/a — versions n/a

Weakness classification (CWE)

References