CVE-2005-1141 - Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow

Back Back to CVE browser

CRITICAL

Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow

Published Apr 16, 2005

9.8

CRITICAL

CVSS 3.1

EPSS 3.38%

Description

Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (3)

http://marc.info/?l=bugtraq&m=111358557823673&w=2
mailing-listx_refsource_BUGTRAQExploitMailing List
http://www.overflow.pl/adv/gocr.txt
x_refsource_MISCBroken LinkExploitVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1144
Advisory

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=111358557823673&w=2		mailing-listx_refsource_BUGTRAQExploitMailing List
http://www.overflow.pl/adv/gocr.txt		x_refsource_MISCBroken LinkExploitVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1144		Advisory