oss-sec mailing list archives
CVE-2008-0553 / CVE-2006-4484 also affects tkimg
From: Tomas Hoger <thoger () redhat com>
Date: Fri, 2 May 2008 11:47:16 +0200
Hi! It was brought to our attention that tkimg uses / forks tk gif handling code and is affected by CVE-2008-0553 (as used for tk) / CVE-2006-4484 (as used for gd). http://tkimg.svn.sourceforge.net/viewvc/tkimg?view=rev&revision=135 Tk fix: http://tktoolkit.cvs.sourceforge.net/tktoolkit/tk/generic/tkImgGIF.c?r1=1.40&r2=1.41 tkimg changelog uses CVE-2006-4484 (as it's used in the tk commit message as well), but CVE-2008-0553 should probably be used here. -- Tomas Hoger / Red Hat Security Response Team
Current thread:
- CVE-2008-0553 / CVE-2006-4484 also affects tkimg Tomas Hoger (May 02)