CVE-2005-1142

Published: Apr 15, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a P3 format PNM file with more data than implied by its width and height values.

Affected (5)

Products: Gocr: Optical Character Recognition Utility

Gocr

1 product

Optical Character Recognition Utility

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Gocr Optical Character Recognition Utility	Version 0.3.2
Gocr Optical Character Recognition Utility	Version 0.3.4
Gocr Optical Character Recognition Utility	Version 0.37
Gocr Optical Character Recognition Utility	Version 0.39
Gocr Optical Character Recognition Utility	Version 0.40

References (4)

http://marc.info/?l=bugtraq&m=111358557823673&w=2

Source: cve@mitre.org

http://www.overflow.pl/adv/gocr.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://marc.info/?l=bugtraq&m=111358557823673&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.overflow.pl/adv/gocr.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

Timeline

No history available yet.