CVE-2008-0553: Tcl Tk

Medium severity, CVSS 6.8. EPSS: 4.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484.

Affected products

• Tcl Tk Tcl Tk: up to and including 8.4.17; version 2.1 only; version 3.3 only; version 4.0p1 only; version 6.1 only; version 6.1p1 only; …

Published 2008-02-07. Last modified 2026-06-16.