CVE-2005-1141
CriticalSummary
Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow.
Risk Assessment
An attacker can remotely execute arbitrary code on the victim's system, potentially leading to full control of the application and possibly the entire system.
Recommendation
Update GOCR to the latest available version that includes a fix for this vulnerability. If an update is not possible, avoid processing PNM files from untrusted sources.
Original NVD description (English source)
Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow.