CVE-2005-1142

Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a P3 format PNM file with more data than implied by its width and height values.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-04-15

Last modified

2024-08-07

Affected products

• Optical Character Recognition Utility (Gocr)

References

• http://marc.info/?l=bugtraq&m=111358557823673&w=2
• http://www.overflow.pl/adv/gocr.txt