CVE-2005-1141 Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, whi...
CriticalCVSS 9.8
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| optical character recognition project optical character recognition | = 0.40 | No fix listed |
| debian/gocr(Debian:12) | < 0.39-5 | 0.39-5 |
| debian/gocr(Debian:13) | < 0.39-5 | 0.39-5 |
| debian/gocr(Debian:14) | < 0.39-5 | 0.39-5 |
References
- 20050415 [Overflow.pl] GOCR - Multiple vulnerabilities exploit mailing-list
- www.overflow.pl broken-link exploit vendor-advisory
- Debian Security Tracker CVE-2005-1141 vendor-advisory