/ 
Tk400.202 UNAUTHORIZED RELEASE
/ Axis
Security Advisories (3)
CVE-2006-4484 (2008-10-01)

Buffer overflow in the LWZReadByte_ function in the GD extension in allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.

CVE-2007-4772 (2008-01-09)

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

CVE-2007-6067 (2008-01-09)

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.

NAME

Axis - Canvas with Axes

SYNOPSIS

$mw = MainWindow->new;                                           
$t = $mw->Axis(-xmax => 10, -ymax => 10);                        
$t->create('line',$t->plx(2),$t->ply(3.1),$t->plx(4),$t->ply(4));

DESCRIPTION

This is an improved version of the axis widget. Changes with respect to the previous version are :

  • the 'pack' has been moved out the widget. One has to do his own packing

  • it is now possible to work in the coordinates of the axis. The following piece of code draws a line between the points (2 , 3.1) (4 , 4).

AUTHOR

Kris Boulez		(Kris.Boulez@rug.ac.be)
Biomolecular NMR unit	<http://bionmr1.rug.ac.be/~kris>
University of Ghent, Belgium