PT-2005-2157 · Gocr+1 · Gocr+1

CVE-2005-1141 · Publicado 2005-04-15 · Atualizado 2024-02-08

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GOCR version 0.40

Description The issue is related to an integer overflow in the readpgm function in pnm.c, which occurs when using the netpbm library. This allows remote attackers to execute arbitrary code via a PNM file with large width and height values, leading to a heap-based buffer overflow.

Recommendations For GOCR version 0.40, consider disabling the readpgm function in pnm.c as a temporary workaround until a patch is available. Restrict access to PNM files with large width and height values to minimize the risk of exploitation.

Exploit

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2005-1141

Produtos afetados

Gocr

Netpbm

Referências · 7

• 🔥 http://overflow.pl/adv/gocr.txt · Exploit
• 🔥 http://marc.info/?l=bugtraq&m=111358557823673&w=2 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-1141 · Aviso do Fabricante
• https://t.me/cvenotify/70627 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2005-1141 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1141 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2005-1141 · Aviso do Fabricante