Tcl Tk vulnerabilities
6 vulnerabilities
Known vulnerabilities in Tcl Tk products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Tcl Tk5 vulnerabilities
- Tk Toolkit1 vulnerabilities
RoutineCVE-2008-0553tcl_tk +4 moretcl_tk tcl_tkStack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.CVSS6.8MediumEPSS4.25%RoutineCVE-2007-6067postgresql +1 morepostgresql postgresqlAlgorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.CVSS6.8MediumEPSS3.85%RoutineCVE-2007-4769postgresql +1 morepostgresql postgresqlThe regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.CVSS6.8MediumEPSS3.64%RoutineCVE-2007-5378tcl_tk · tk_toolkit +3 moretcl_tk tk_toolkitBuffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers the overflow in the ReadImage function, a different vulnerability than CVE-2007-5137.CVSS4.3MediumEPSS2.64%RoutineCVE-2007-5137tcl_tk +1 moretcl_tk tcl_tkBuffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for CVE-2007-5378.CVSS6.8MediumEPSS4.86%RoutineCVE-2007-2877tcl_tktcl_tk tcl_tkBuffer overflow in tcl/win/tclWinReg.c in Tcl (Tcl/Tk) before 8.5a6 allows local users to gain privileges via long registry key paths.CVSS7.2HighEPSS0.36%