• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Tcl/Tk Tk Toolkit 'ReadImage()' GIF File Buffer Overflow Vulnerability

Solution:
The vendor addressed this issue in TCL/TK 8.5.1. Please see the references for more information.


Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu tk8.4-dev_8.4.16-2ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tk8.4/tk8.4-dev_8.4.16-2ubuntu1.1_ lpia.deb


• Ubuntu tk8.4-doc_8.4.16-2ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tk8.4/tk8.4-doc_8.4.16-2 ubuntu1.1_all.deb


• Ubuntu tk8.4_8.4.16-2ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tk8.4/tk8.4_8.4.16-2ubuntu1.1_lpia .deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu tk8.0-dev_8.0.5-11ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tk8.0/tk8.0-dev_8.0. 5-11ubuntu0.1_i386.deb


• Ubuntu tk8.0-doc_8.0.5-11ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tk8.0/tk8.0-doc_8.0. 5-11ubuntu0.1_all.deb


• Ubuntu tk8.0_8.0.5-11ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tk8.0/tk8.0_8.0.5-11ubun tu0.1_i386.deb


• Ubuntu tk8.3-dev_8.3.5-4ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tk8.3/tk8.3-dev_8.3.5-4u buntu1.2_i386.deb


• Ubuntu tk8.3-doc_8.3.5-4ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tk8.3/tk8.3-doc_8.3. 5-4ubuntu1.2_all.deb


• Ubuntu tk8.3_8.3.5-4ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tk8.3/tk8.3_8.3.5-4ubunt u1.2_i386.deb


• Ubuntu tk8.4-dev_8.4.12-0ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tk8.4/tk8.4-dev_8.4.12-0 ubuntu1.2_i386.deb


• Ubuntu tk8.4-doc_8.4.12-0ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tk8.4/tk8.4-doc_8.4.12-0 ubuntu1.2_all.deb


• Ubuntu tk8.4_8.4.12-0ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tk8.4/tk8.4_8.4.12-0ubun tu1.2_i386.deb

TCL/TK TCL/TK 8.0

• TCL/TK tk8.5.1-src.tar.gz
  http://prdownloads.sourceforge.net/tcl/tk8.5.1-src.tar.gz

TCL/TK TCL/TK 8.3.1

• TCL/TK tk8.5.1-src.tar.gz
  http://prdownloads.sourceforge.net/tcl/tk8.5.1-src.tar.gz

TCL/TK TCL/TK 8.3.3

• TCL/TK tk8.5.1-src.tar.gz
  http://prdownloads.sourceforge.net/tcl/tk8.5.1-src.tar.gz

TCL/TK TCL/TK 8.3.5

• TCL/TK tk8.5.1-src.tar.gz
  http://prdownloads.sourceforge.net/tcl/tk8.5.1-src.tar.gz

TCL/TK TCL/TK 8.4.1

• TCL/TK tk8.5.1-src.tar.gz
  http://prdownloads.sourceforge.net/tcl/tk8.5.1-src.tar.gz

TCL/TK TCL/TK 8.4.11

• TCL/TK tk8.5.1-src.tar.gz
  http://prdownloads.sourceforge.net/tcl/tk8.5.1-src.tar.gz

TCL/TK TCL/TK 8.4.15

• TCL/TK tk8.5.1-src.tar.gz
  http://prdownloads.sourceforge.net/tcl/tk8.5.1-src.tar.gz

TCL/TK TCL/TK 8.4.2

• TCL/TK tk8.5.1-src.tar.gz
  http://prdownloads.sourceforge.net/tcl/tk8.5.1-src.tar.gz

TCL/TK TCL/TK 8.4.4

• TCL/TK tk8.5.1-src.tar.gz
  http://prdownloads.sourceforge.net/tcl/tk8.5.1-src.tar.gz

TCL/TK TCL/TK 8.4.6

• TCL/TK tk8.5.1-src.tar.gz
  http://prdownloads.sourceforge.net/tcl/tk8.5.1-src.tar.gz

TCL/TK TCL/TK 8.4.8

• TCL/TK tk8.5.1-src.tar.gz
  http://prdownloads.sourceforge.net/tcl/tk8.5.1-src.tar.gz

TCL/TK TCL/TK 8.4.9

• TCL/TK tk8.5.1-src.tar.gz
  http://prdownloads.sourceforge.net/tcl/tk8.5.1-src.tar.gz

TCL/TK TCL/TK 8.5 a2

• TCL/TK tk8.5.1-src.tar.gz
  http://prdownloads.sourceforge.net/tcl/tk8.5.1-src.tar.gz