CVE-2005-1142

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-04-15 · updated 2026-06-16

Description

Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a P3 format PNM file with more data than implied by its width and height values.

Affected products

Gocr Optical Character Recognition Utility: 0.3.2, 0.3.4, 0.37, 0.39, 0.40

References

http://marc.info/?l=bugtraq&m=111358557823673&w=2
http://www.overflow.pl/adv/gocr.txt
http://marc.info/?l=bugtraq&m=111358557823673&w=2
http://www.overflow.pl/adv/gocr.txt

Get alerted when CVE-2005-1142 or the next vulnerability affects your stack