CVEvulnerability

CVE-2005-0064

7.5 HIGH Published 2005-05-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-05-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.

Affected configurations

• xpdf xpdf 0.2 • xpdf xpdf 0.3 • xpdf xpdf 0.4 • xpdf xpdf 0.5 • xpdf xpdf 0.5a • xpdf xpdf 0.6 • xpdf xpdf 0.7 • xpdf xpdf 0.7a • xpdf xpdf 0.80 • xpdf xpdf 0.90 • xpdf xpdf 0.91 • xpdf xpdf 0.91a • xpdf xpdf 0.91b • xpdf xpdf 0.91c • xpdf xpdf 0.92 • xpdf xpdf 0.92a • xpdf xpdf 0.92b • xpdf xpdf 0.92c • xpdf xpdf 0.92d • xpdf xpdf 0.92e • xpdf xpdf 0.93 • xpdf xpdf 0.93a • xpdf xpdf 0.93b • xpdf xpdf 0.93c • xpdf xpdf 1.0 • xpdf xpdf 1.0a • xpdf xpdf 1.1 • xpdf xpdf 2.0 • xpdf xpdf 2.1 • xpdf xpdf 2.2 • xpdf xpdf 2.3 • xpdf xpdf 3.0

Related

Referenced by CWE · observed example (1)

  • CWE-130 Improper Handling of Length Parameter Inconsistency weakness

References