CVE-2007-5378

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-10-12 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via an animated GIF in which the first subimage is smaller than a subsequent subimage, which triggers the overflow in the ReadImage function, a different vulnerability than CVE-2007-5137.

Affected products

Tcl Tk Tk Toolkit: through 8.3.5; through 8.4.12

References

http://secunia.com/advisories/27207
http://secunia.com/advisories/27295
http://secunia.com/advisories/27801
http://secunia.com/advisories/27806
http://secunia.com/advisories/29070
http://secunia.com/advisories/30129
http://secunia.com/advisories/30535
http://secunia.com/advisories/34297
http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1
http://www.attrition.org/pipermail/vim/2007-October/001826.html
http://www.debian.org/security/2007/dsa-1415
http://www.debian.org/security/2007/dsa-1416

Get alerted when CVE-2007-5378 or the next vulnerability affects your stack