NVD

CVE-2008-0553 Detail

Modified

This vulnerability has been modified since it was last analyzed by the NVD. It is awaiting reanalysis which may result in further changes to the information provided.

Current Description

Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.

View Analysis Description

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: 6.8 MEDIUM

Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P)

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink	Resource
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
http://secunia.com/advisories/28784	Patch Vendor Advisory
http://secunia.com/advisories/28784	Patch Vendor Advisory
http://secunia.com/advisories/28807	Vendor Advisory
http://secunia.com/advisories/28807	Vendor Advisory
http://secunia.com/advisories/28848	Vendor Advisory
http://secunia.com/advisories/28848	Vendor Advisory
http://secunia.com/advisories/28857	Vendor Advisory
http://secunia.com/advisories/28857	Vendor Advisory
http://secunia.com/advisories/28867	Vendor Advisory
http://secunia.com/advisories/28867	Vendor Advisory
http://secunia.com/advisories/28954	Vendor Advisory
http://secunia.com/advisories/28954	Vendor Advisory
http://secunia.com/advisories/29069	Vendor Advisory
http://secunia.com/advisories/29069	Vendor Advisory
http://secunia.com/advisories/29070	Vendor Advisory
http://secunia.com/advisories/29070	Vendor Advisory
http://secunia.com/advisories/29622	Vendor Advisory
http://secunia.com/advisories/29622	Vendor Advisory
http://secunia.com/advisories/30129	Vendor Advisory
http://secunia.com/advisories/30129	Vendor Advisory
http://secunia.com/advisories/30188	Vendor Advisory
http://secunia.com/advisories/30188	Vendor Advisory
http://secunia.com/advisories/30535	Vendor Advisory
http://secunia.com/advisories/30535	Vendor Advisory
http://secunia.com/advisories/30717	Vendor Advisory
http://secunia.com/advisories/30717	Vendor Advisory
http://secunia.com/advisories/30783	Vendor Advisory
http://secunia.com/advisories/30783	Vendor Advisory
http://secunia.com/advisories/32608
http://secunia.com/advisories/32608
http://securitytracker.com/id?1019309
http://securitytracker.com/id?1019309
http://sourceforge.net/project/shownotes.php?release_id=573933&group_id=10894
http://sourceforge.net/project/shownotes.php?release_id=573933&group_id=10894
http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1
http://ubuntu.com/usn/usn-664-1
http://ubuntu.com/usn/usn-664-1
http://wiki.rpath.com/Advisories:rPSA-2008-0054
http://wiki.rpath.com/Advisories:rPSA-2008-0054
http://www.debian.org/security/2008/dsa-1490
http://www.debian.org/security/2008/dsa-1490
http://www.debian.org/security/2008/dsa-1491
http://www.debian.org/security/2008/dsa-1491
http://www.debian.org/security/2008/dsa-1598
http://www.debian.org/security/2008/dsa-1598
http://www.mandriva.com/security/advisories?name=MDVSA-2008:041
http://www.mandriva.com/security/advisories?name=MDVSA-2008:041
http://www.novell.com/linux/security/advisories/2008_13_sr.html
http://www.novell.com/linux/security/advisories/2008_13_sr.html
http://www.redhat.com/support/errata/RHSA-2008-0134.html
http://www.redhat.com/support/errata/RHSA-2008-0134.html
http://www.redhat.com/support/errata/RHSA-2008-0135.html
http://www.redhat.com/support/errata/RHSA-2008-0135.html
http://www.redhat.com/support/errata/RHSA-2008-0136.html
http://www.redhat.com/support/errata/RHSA-2008-0136.html
http://www.securityfocus.com/archive/1/488069/100/0/threaded
http://www.securityfocus.com/archive/1/488069/100/0/threaded
http://www.securityfocus.com/archive/1/493080/100/0/threaded
http://www.securityfocus.com/archive/1/493080/100/0/threaded
http://www.securityfocus.com/bid/27655	Patch
http://www.securityfocus.com/bid/27655	Patch
http://www.vmware.com/security/advisories/VMSA-2008-0009.html
http://www.vmware.com/security/advisories/VMSA-2008-0009.html
http://www.vupen.com/english/advisories/2008/0430	Vendor Advisory
http://www.vupen.com/english/advisories/2008/0430	Vendor Advisory
http://www.vupen.com/english/advisories/2008/1456/references	Vendor Advisory
http://www.vupen.com/english/advisories/2008/1456/references	Vendor Advisory
http://www.vupen.com/english/advisories/2008/1744	Vendor Advisory
http://www.vupen.com/english/advisories/2008/1744	Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=431518
https://bugzilla.redhat.com/show_bug.cgi?id=431518
https://issues.rpath.com/browse/RPL-2215
https://issues.rpath.com/browse/RPL-2215
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10098
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10098
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00115.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00115.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00132.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00132.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00193.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00193.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00205.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00205.html
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00116.html
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00116.html

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	NIST

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

5 change records found show changes

CVE Modified by CVE 11/20/2024 7:42:22 PM

Action	Type	New Value
Added	Reference	http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
Added	Reference	http://secunia.com/advisories/28784
Added	Reference	http://secunia.com/advisories/28807
Added	Reference	http://secunia.com/advisories/28848
Added	Reference	http://secunia.com/advisories/28857
Added	Reference	http://secunia.com/advisories/28867
Added	Reference	http://secunia.com/advisories/28954
Added	Reference	http://secunia.com/advisories/29069
Added	Reference	http://secunia.com/advisories/29070
Added	Reference	http://secunia.com/advisories/29622
Added	Reference	http://secunia.com/advisories/30129
Added	Reference	http://secunia.com/advisories/30188
Added	Reference	http://secunia.com/advisories/30535
Added	Reference	http://secunia.com/advisories/30717
Added	Reference	http://secunia.com/advisories/30783
Added	Reference	http://secunia.com/advisories/32608
Added	Reference	http://securitytracker.com/id?1019309
Added	Reference	http://sourceforge.net/project/shownotes.php?release_id=573933&group_id=10894
Added	Reference	http://sunsolve.sun.com/search/document.do?assetkey=1-26-237465-1
Added	Reference	http://ubuntu.com/usn/usn-664-1
Added	Reference	http://wiki.rpath.com/Advisories:rPSA-2008-0054
Added	Reference	http://www.debian.org/security/2008/dsa-1490
Added	Reference	http://www.debian.org/security/2008/dsa-1491
Added	Reference	http://www.debian.org/security/2008/dsa-1598
Added	Reference	http://www.mandriva.com/security/advisories?name=MDVSA-2008:041
Added	Reference	http://www.novell.com/linux/security/advisories/2008_13_sr.html
Added	Reference	http://www.redhat.com/support/errata/RHSA-2008-0134.html
Added	Reference	http://www.redhat.com/support/errata/RHSA-2008-0135.html
Added	Reference	http://www.redhat.com/support/errata/RHSA-2008-0136.html
Added	Reference	http://www.securityfocus.com/archive/1/488069/100/0/threaded
Added	Reference	http://www.securityfocus.com/archive/1/493080/100/0/threaded
Added	Reference	http://www.securityfocus.com/bid/27655
Added	Reference	http://www.vmware.com/security/advisories/VMSA-2008-0009.html
Added	Reference	http://www.vupen.com/english/advisories/2008/0430
Added	Reference	http://www.vupen.com/english/advisories/2008/1456/references
Added	Reference	http://www.vupen.com/english/advisories/2008/1744
Added	Reference	https://bugzilla.redhat.com/show_bug.cgi?id=431518
Added	Reference	https://issues.rpath.com/browse/RPL-2215
Added	Reference	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10098
Added	Reference	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00115.html
Added	Reference	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00132.html
Added	Reference	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00193.html
Added	Reference	https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00205.html
Added	Reference	https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00116.html

Quick Info

CVE Dictionary Entry:
CVE-2008-0553
NVD Published Date:
02/07/2008
NVD Last Modified:
11/20/2024
Source:
Red Hat, Inc.

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2008-0553 Detail

Current Description

Analysis Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Change History

CVE Modified by CVE 11/20/2024 7:42:22 PM

CVE Modified by Red Hat, Inc. 5/13/2024 9:50:35 PM

CVE Modified by Red Hat, Inc. 10/15/2018 6:01:08 PM

CVE Modified by Red Hat, Inc. 9/28/2017 9:30:20 PM

Initial CVE Analysis 2/08/2008 11:41:00 AM

Quick Info