PT-2007-4179 · Tcl+1 · Tcltk+1

Published 2007-05-29 · Updated 2024-07-05 · CVE-2007-2877

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tcl/Tk versions prior to 8.5a6

Description A buffer overflow issue exists, allowing local users to gain privileges through long registry key paths.

Recommendations For versions prior to 8.5a6, update to version 8.5a6 or later to resolve the issue.

Fix

Related Identifiers

ALT-PU-2017-1441

ALT-PU-2024-9046

CVE-2007-2877

Affected Products

Alt Linux

Tcltk

References · 33

• https://bdu.fstec.ru/vul/2015-06549 · Security Note
• https://bdu.fstec.ru/vul/2015-06555 · Security Note
• https://errata.altlinux.org/ALT-PU-2024-9046 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35331 · Security Note
• http://secunia.com/advisories/25401 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03442 · Security Note
• https://bdu.fstec.ru/vul/2015-01936 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4769 · Security Note
• https://bdu.fstec.ru/vul/2015-01938 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2877 · Security Note
• http://sourceforge.net/project/shownotes.php?group_id=10894&release_id=503937 · Patch
• https://bdu.fstec.ru/vul/2015-03440 · Security Note
• https://bdu.fstec.ru/vul/2022-01774 · Security Note
• https://bdu.fstec.ru/vul/2015-06550 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6067 · Security Note