NetSight
high7.5

CVE-2005-1142

Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a…

Impact

Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a P3 format PNM file with more data than implied by its width and height values.

Affected products

VendorProductAffected versions
GocrOptical Character Recognition Utility
Versions 0.3.2, 0.3.4, 0.37, 0.39, 0.40

References