PT-2005-2157 · Gocr+1 · Gocr+1

Published 2005-04-15 · Updated 2024-02-08 · CVE-2005-1141

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GOCR version 0.40

Description The issue is related to an integer overflow in the readpgm function in pnm.c, which occurs when using the netpbm library. This allows remote attackers to execute arbitrary code via a PNM file with large width and height values, leading to a heap-based buffer overflow.

Recommendations For GOCR version 0.40, consider disabling the readpgm function in pnm.c as a temporary workaround until a patch is available. Restrict access to PNM files with large width and height values to minimize the risk of exploitation.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2005-1141

Affected Products

Gocr

Netpbm

References · 7

• 🔥 http://overflow.pl/adv/gocr.txt · Exploit
• 🔥 http://marc.info/?l=bugtraq&m=111358557823673&w=2 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-1141 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-1141 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1141 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2005-1141 · Vendor Advisory
• https://t.me/cvenotify/70627 · Telegram Post