CVE-2007-5137
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8...
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for CVE-2007-5378.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for CVE-2007-5378.
- Record
CVE-2007-5137- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for CVE-2007-5378.
- Record
CVE-2007-5137- Updated
- 2026-11-02
EUVDEUVD-2007-5118 No score
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for CVE-2007-5378.
- Record
EUVD-2007-5118- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-67cg-f67f-c8v9 No score
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8...
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for CVE-2007-5378.
- Record
GHSA-67cg-f67f-c8v9- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for CVE-2007-5378.
- Record
CVE-2007-5137- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-5137 No score
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for CVE-2007-5378.
- Record
DEBIAN-CVE-2007-5137- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libtk-imgDebian:12 |
before 1.3-release-8 | 1.3-release-8 |
libtk-imgDebian:13 |
before 1.3-release-8 | 1.3-release-8 |
libtk-imgDebian:14 |
before 1.3-release-8 | 1.3-release-8 |
libtk-imgDebian:4.0 From an advisory covering 2 CVEs |
before 1:1.3-15etch3, plus listed versions 1:1.3-151:1.3-15etch2 |
1:1.3-15etch3 |
libtk-imgDebian:5.0 From an advisory covering 2 CVEs |
before 1:1.3-release-7+lenny1, plus listed versions 1:1.3-release-7 |
1:1.3-release-7+lenny1 |
tkRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:8.4.13-5.el5_1.1 | 0:8.4.13-5.el5_1.1 |
tk-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:8.4.13-5.el5_1.1 | 0:8.4.13-5.el5_1.1 |
tk-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:8.4.13-5.el5_1.1 | 0:8.4.13-5.el5_1.1 |
tkRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:8.4.13-5.el5_1.1 | 0:8.4.13-5.el5_1.1 |
tk-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:8.4.13-5.el5_1.1 | 0:8.4.13-5.el5_1.1 |
tkRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.4.13-5.el5_1.1 | 0:8.4.13-5.el5_1.1 |
tk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.4.13-5.el5_1.1 | 0:8.4.13-5.el5_1.1 |
tk-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:8.4.13-5.el5_1.1 | 0:8.4.13-5.el5_1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5137 is a medium vulnerability (CVSS 6.8) in Tcl Tk Tk, published September 28, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.86%, the 92nd percentile. Fixed in libtk-img 1.3-release-8.
References
secunia.com/advisories/34297
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9540
redhat.com/archives/fedora-package-announce/2007-October/msg00261.html
bugs.gentoo.org/show_bug.cgi?id=192539
Show 27 moreShow less
mandriva.com/security/advisories?name=MDKSA-2007:200
debian.org/security/2009/dsa-1743
security.gentoo.org/glsa/glsa-200710-07.xml
sourceforge.net/project/shownotes.php?release_id=541207
ubuntu.com/usn/usn-529-1
attrition.org/pipermail/vim/2007-October/001826.html
novell.com/linux/security/advisories/2007_20_sr.html
securityfocus.com/bid/25826
nvd.nist.gov/vuln/detail/CVE-2007-5137
github.com/advisories/GHSA-67cg-f67f-c8v9
security-tracker.debian.org/tracker/CVE-2007-5137
access.redhat.com/errata/RHSA-2008:0136
bugzilla.redhat.com/show_bug.cgi?id=290991
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0136.json
cve.org/CVERecord?id=CVE-2007-5137