S-067: Tk Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-067: Tk Vulnerability
# 1  
Old 02-22-2008
S-067: Tk Vulnerability

It was discovered that Tk, a cross-platform graphical toolkit for Tcl performs insufficient input validation in the code used to load GIF images, which may lead to the execution of arbitrary code. The risk is MEDIUM. May lead to the execution of arbitrary code.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

4 More Discussions You Might Find Interesting

1. IP Networking

Common Vulnerability

Hi there, I am trying to find info about the commonly used ports and how it can be vulnerable and to identify them? For example, I would like to identify how to man-in-the-middle using these ports 21(FTP),22(SSH),23(TELNET), (1 Reply)
Discussion started by: alvinoo
1 Replies

2. News, Links, Events and Announcements

Bash vulnerability

Not sure if there is a post about it here somewhere already. Anyway: Remote exploit vulnerability in bash CVE-2014-6271 | CSO Online (3 Replies)
Discussion started by: zaxxon
3 Replies

3. UNIX for Dummies Questions & Answers

Vulnerability Alerts

Aside from CERT, are there any additional sources for unix/linux vulnerabilities? (1 Reply)
Discussion started by: kmgrady01
1 Replies

4. Cybersecurity

SNMP Vulnerability

SNMP Vulnerability: In a few minutes wire services and other news sources will begin breaking a story about widespread vulnerabilities in SNMP (Simple Network Management Protocol). Exploits of the vulnerability cause systems to fail or to be taken over. The vulnerability can be found in... (1 Reply)
Discussion started by: dpatel
1 Replies
Login or Register to Ask a Question
platform(n)						       Tcl Bundled Packages						       platform(n)

__________________________________________________________________________________________________________________________________________________

NAME
platform - System identification support code and utilities SYNOPSIS
package require platform ?1.0.4? platform::generic platform::identify platform::patterns identifier _________________________________________________________________ DESCRIPTION
The platform package provides several utility commands useful for the identification of the architecture of a machine running Tcl. Whilst Tcl provides the tcl_platform array for identifying the current architecture (in particular, the platform and machine elements) this is not always sufficient. This is because (on Unix machines) tcl_platform reflects the values returned by the uname command and these are not standardized across platforms and architectures. In addition, on at least one platform (AIX) the tcl_platform(machine) contains the CPU serial number. Consequently, individual applications need to manipulate the values in tcl_platform (along with the output of system specific utilities) - which is both inconvenient for developers, and introduces the potential for inconsistencies in identifying architectures and in naming con- ventions. The platform package prevents such fragmentation - i.e., it establishes a standard naming convention for architectures running Tcl and makes it more convenient for developers to identify the current architecture a Tcl program is running on. COMMANDS
platform::identify This command returns an identifier describing the platform the Tcl core is running on. The returned identifier has the general for- mat OS-CPU. The OS part of the identifier may contain details like kernel version, libc version, etc., and this information may con- tain dashes as well. The CPU part will not contain dashes, making the preceding dash the last dash in the result. platform::generic This command returns a simplified identifier describing the platform the Tcl core is running on. In contrast to platform::identify it leaves out details like kernel version, libc version, etc. The returned identifier has the general format OS-CPU. platform::patterns identifier This command takes an identifier as returned by platform::identify and returns a list of identifiers describing compatible architec- tures. KEYWORDS
operating system, cpu architecture, platform, architecture platform 1.0.4 platform(n)