CVE-2005-0064
Fixed in a distro release EPSS 7%
Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.
Products: xpdf
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.1.22-6 |
| Debian 12 | xpdf | 3.00-13 |
| Debian 13 | cups | 1.1.22-6 |
| Debian 13 | xpdf | 3.00-13 |
| Debian 14 | cups | 1.1.22-6 |
| Debian 14 | xpdf | 3.00-13 |
| Debian 3.0 | cupsys | 1.1.14-5woody12 |
| Debian 3.0 | xpdf | 1.00-3.4 |
| Red Hat Enterprise Linux 3 | cups | 1:1.1.17-13.3.24 |
| Red Hat Enterprise Linux 3 | cups-debuginfo | 1:1.1.17-13.3.24 |
| Red Hat Enterprise Linux 3 | cups-devel | 1:1.1.17-13.3.24 |
| Red Hat Enterprise Linux 3 | cups-libs | 1:1.1.17-13.3.24 |
| Red Hat Enterprise Linux 3 | xpdf | 1:2.02-9.5 |
| Red Hat Enterprise Linux 3 | xpdf-debuginfo | 1:2.02-9.5 |
| Red Hat Enterprise Linux 4 | cups | 1:1.1.22-0.rc1.9.6 |
| Red Hat Enterprise Linux 4 | cups-debuginfo | 1:1.1.22-0.rc1.9.6 |
| Red Hat Enterprise Linux 4 | cups-devel | 1:1.1.22-0.rc1.9.6 |
| Red Hat Enterprise Linux 4 | cups-libs | 1:1.1.22-0.rc1.9.6 |
| Red Hat Enterprise Linux 4 | gpdf | 0:2.8.2-4.3 |
| Red Hat Enterprise Linux 4 | gpdf-debuginfo | 0:2.8.2-4.3 |
| Red Hat Enterprise Linux 4 | kdegraphics | 7:3.3.1-3.3 |
| Red Hat Enterprise Linux 4 | kdegraphics-debuginfo | 7:3.3.1-3.3 |
| Red Hat Enterprise Linux 4 | kdegraphics-devel | 7:3.3.1-3.3 |
| Red Hat Enterprise Linux 4 | tetex | 0:2.0.2-22.EL4.4 |
| Red Hat Enterprise Linux 4 | tetex-afm | 0:2.0.2-22.EL4.4 |
| Red Hat Enterprise Linux 4 | tetex-debuginfo | 0:2.0.2-22.EL4.4 |
| Red Hat Enterprise Linux 4 | tetex-doc | 0:2.0.2-22.EL4.4 |
| Red Hat Enterprise Linux 4 | tetex-dvips | 0:2.0.2-22.EL4.4 |
| Red Hat Enterprise Linux 4 | tetex-fonts | 0:2.0.2-22.EL4.4 |
| Red Hat Enterprise Linux 4 | tetex-latex | 0:2.0.2-22.EL4.4 |
| Red Hat Enterprise Linux 4 | tetex-xdvi | 0:2.0.2-22.EL4.4 |
| Red Hat Enterprise Linux 4 | xpdf | 1:3.00-11.5 |
| Red Hat Enterprise Linux 4 | xpdf-debuginfo | 1:3.00-11.5 |