Back to list
Feb 12 2008 11:12PM
rPath Update Announcements (announce-noreply rpath com)
rPath Security Advisory: 2008-0054-1
rPath Linux 1
Exposure Level Classification:
Indirect User Deterministic Unauthorized Access
rPath Issue Tracking System:
Previous versions of the tk package are vulnerable to an Arbitrary Code
Execution attack in which an attacker may use a maliciously crafted GIF
file to trigger a buffer overflow in an application using libtk.
Copyright 2008 rPath, Inc.
This file is distributed under the terms of the MIT License.
A copy is available at http://www.rpath.com/permanent/mit-license.html
[ reply ]
Copyright 2010, SecurityFocus