PT-2005-2158 · Jocr · Gocr

Publicado 2005-04-15 · Atualizado 2016-10-18 · CVE-2005-1142

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GOCR version 0.40

Description A heap-based buffer overflow issue exists in the readpgm function in pnm.c, which can be exploited by remote attackers to execute arbitrary code. This is possible when processing a P3 format PNM file that contains more data than implied by its width and height values, and the software is not using netpbm.

Recommendations For GOCR version 0.40, consider avoiding the use of P3 format PNM files with inconsistent data until a patch is available. As a temporary workaround, restrict the processing of PNM files to only those with verified and consistent width, height, and data values to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-1142

Produtos afetados

Gocr

Referências · 6

• 🔥 http://overflow.pl/adv/gocr.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1142 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2005-1142 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2005-1142 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-1142 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=111358557823673&w=2 · Nota