CVE-2021-35331

Description

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding

Weakness classification

• CWE-134: Use of Externally-Controlled Format String

Primary references

• cve@mitre.org — Exploit, Patch, Vendor Advisory
• cve@mitre.org — Exploit, Vendor Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory