Description
jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert the file to PDF.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Convertimagetotext | jiNa OCR Image to Text | 1.0 | — |
References
- ExploitDB-45380 exploit
- Product Reference product
- VulnCheck Advisory: jiNa OCR Image to Text 1.0 Denial of Service via PNG third-party-advisory