CVE-2011-1136

4.7

MEDIUMCVSS v3

Published

November 14, 2019

CVSS v2

6.3 MEDIUM

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.

tesseract

Python Package IndexTesselation based Recovery of Amorphous halo Concentrations

= 2.04, = 2.03NVD

tesseract

Crates.ioHigher-level bindings for Tesseract OCR

= 2.04, = 2.03NVD

Tesseract

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

Tesseract 5 adds a new neural net (LSTM) based OCR engine which is focused on line recognition, but also still supports the legacy Tesseract OCR engine of Tesseract 3 which works by recognizing character patterns. Compatibility with Tesseract 3 is enabled by using the Legacy OCR Engine mode (--oem 0). It also needs traineddata files which support the legacy engine, for example those from the tessdata repository.

= 2.04, = 2.03NVD