Buffer overflow in the LWZReadByte_ function in the GD extension in allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.

• https://metacpan.org/changes/distribution/Tk

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number.

• http://www.postgresql.org/about/news.905
• http://www.securityfocus.com/bid/27163
• http://securitytracker.com/id?1019157
• http://secunia.com/advisories/28359
• http://sourceforge.net/project/shownotes.php?release_id=565440&group_id=10894
• http://sourceforge.net/tracker/index.php?func=detail&aid=1810264&group_id=10894&atid=110894
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:004
• https://issues.rpath.com/browse/RPL-1768
• http://www.debian.org/security/2008/dsa-1460
• http://www.debian.org/security/2008/dsa-1463
• https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00397.html
• https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00469.html
• http://www.redhat.com/support/errata/RHSA-2008-0038.html
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103197-1
• http://secunia.com/advisories/28376
• http://secunia.com/advisories/28438
• http://secunia.com/advisories/28437
• http://secunia.com/advisories/28454
• http://secunia.com/advisories/28464
• http://secunia.com/advisories/28477
• http://secunia.com/advisories/28479
• http://secunia.com/advisories/28455
• http://security.gentoo.org/glsa/glsa-200801-15.xml
• http://secunia.com/advisories/28679
• http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00000.html
• http://secunia.com/advisories/28698
• http://www.redhat.com/support/errata/RHSA-2008-0040.html
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200559-1
• http://secunia.com/advisories/29638
• http://www.vupen.com/english/advisories/2008/1071/references
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01420154
• http://www.vupen.com/english/advisories/2008/0109
• http://www.vupen.com/english/advisories/2008/0061
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39499
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9804
• https://usn.ubuntu.com/568-1/
• http://www.securityfocus.com/archive/1/486407/100/0/threaded
• http://www.securityfocus.com/archive/1/485864/100/0/threaded