7.5

CVE-2005-0064

Exploit

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.

Data is provided by the National Vulnerability Database (NVD)
Xpdf ≫ Xpdf Version0.2
Xpdf ≫ Xpdf Version0.3
Xpdf ≫ Xpdf Version0.4
Xpdf ≫ Xpdf Version0.5
Xpdf ≫ Xpdf Version0.5a
Xpdf ≫ Xpdf Version0.6
Xpdf ≫ Xpdf Version0.7
Xpdf ≫ Xpdf Version0.7a
Xpdf ≫ Xpdf Version0.80
Xpdf ≫ Xpdf Version0.90
Xpdf ≫ Xpdf Version0.91
Xpdf ≫ Xpdf Version0.91a
Xpdf ≫ Xpdf Version0.91b
Xpdf ≫ Xpdf Version0.91c
Xpdf ≫ Xpdf Version0.92
Xpdf ≫ Xpdf Version0.92a
Xpdf ≫ Xpdf Version0.92b
Xpdf ≫ Xpdf Version0.92c
Xpdf ≫ Xpdf Version0.92d
Xpdf ≫ Xpdf Version0.92e
Xpdf ≫ Xpdf Version0.93
Xpdf ≫ Xpdf Version0.93a
Xpdf ≫ Xpdf Version0.93b
Xpdf ≫ Xpdf Version0.93c
Xpdf ≫ Xpdf Version1.0
Xpdf ≫ Xpdf Version1.0a
Xpdf ≫ Xpdf Version1.1
Xpdf ≫ Xpdf Version2.0
Xpdf ≫ Xpdf Version2.1
Xpdf ≫ Xpdf Version2.2
Xpdf ≫ Xpdf Version2.3
Xpdf ≫ Xpdf Version3.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 8.4% 0.919
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P