CVE Daily

CVE-2005-1141

Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the ...

Critical CVSS 9.8

Overview

Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow.

CWE: CWE-190 Published: 2005-04-15T04:00:00.000
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.8 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags