{"action":"Upgrade libtk-img to 1.3-release-8 or later.","affected":[{"fixed":"1.3-release-8","introduced":"0"}],"component":"libtk-img","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.3-release-8"],"id":"tcs_01M5N8WTZAGPPMVFPKVEJJF59Q","modified_at":"2026-10-21T17:47:47.097714825Z","published_at":"2007-10-12T01:17:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2007-5378","https://security-tracker.debian.org/tracker/CVE-2007-5378"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2007-5378#Debian:14/libtk-img","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2007-5378"}],"summary":"Buffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and 8.3.5 and earlier, allows user-assisted attackers to cause a denial of service (segmentation fault) via"}