PT-2005-2158 · Jocr · Gocr

Published 2005-04-15 · Updated 2016-10-18 · CVE-2005-1142

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GOCR version 0.40

Description A heap-based buffer overflow issue exists in the readpgm function in pnm.c, which can be exploited by remote attackers to execute arbitrary code. This is possible when processing a P3 format PNM file that contains more data than implied by its width and height values, and the software is not using netpbm.

Recommendations For GOCR version 0.40, consider avoiding the use of P3 format PNM files with inconsistent data until a patch is available. As a temporary workaround, restrict the processing of PNM files to only those with verified and consistent width, height, and data values to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-1142

Affected Products

Gocr

References · 6

• 🔥 http://overflow.pl/adv/gocr.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1142 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2005-1142 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-1142 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-1142 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=111358557823673&w=2 · Note