Every CVE Search/ Get API key

CVE-2005-0064

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier...

7.5 HighFix available

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.

Exploit likelihood

7.22%Down 5.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.

Record
CVE-2005-0064
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.

Record
CVE-2005-0064
Updated
2026-11-02
EUVDEUVD-2005-0065 No score

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.

Record
EUVD-2005-0065
Updated
2026-11-03
GitHub AdvisoriesGHSA-h375-h7pm-622c No score

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier...

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.

Record
GHSA-h375-h7pm-622c
Updated
2026-11-02
OSV No score

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.

Record
CVE-2005-0064
Updated
2026-11-02
OSVDEBIAN-CVE-2005-0064 No score

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.

Record
DEBIAN-CVE-2005-0064
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cups
Debian:12
 before 1.1.22-6
1.1.22-6
cups
Debian:13
 before 1.1.22-6
1.1.22-6
cups
Debian:14
 before 1.1.22-6
1.1.22-6
xpdf
Debian:12
 before 3.00-13
3.00-13
xpdf
Debian:13
 before 3.00-13
3.00-13
xpdf
Debian:14
 before 3.00-13
3.00-13
cupsys
Debian:3.0
 before 1.1.14-5woody12, plus listed versions
1.1.14-5woody10
1.1.14-5woody12
xpdf
Debian:3.0
 before 1.00-3.4, plus listed versions
1.00-3.2
1.00-3.4
tetex
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-afm
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
Show 98 moreShow less
Affected packages
PackageAffectedFixed
tetex-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-doc
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-dvips
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-fonts
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-latex
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-xdvi
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-afm
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-doc
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-dvips
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-fonts
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-latex
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-xdvi
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-afm
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-doc
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-dvips
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-fonts
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-latex
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-xdvi
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-afm
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-doc
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-dvips
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-fonts
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-latex
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-xdvi
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
xpdf
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 1:3.00-11.5
1:3.00-11.5
xpdf-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 1:3.00-11.5
1:3.00-11.5
xpdf
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 1:3.00-11.5
1:3.00-11.5
xpdf-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 1:3.00-11.5
1:3.00-11.5
xpdf
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 1:3.00-11.5
1:3.00-11.5
xpdf-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 1:3.00-11.5
1:3.00-11.5
xpdf
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 1:3.00-11.5
1:3.00-11.5
xpdf-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 1:3.00-11.5
1:3.00-11.5
cups
Red Hat:enterprise_linux:3::as
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups-debuginfo
Red Hat:enterprise_linux:3::as
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups-devel
Red Hat:enterprise_linux:3::as
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups-libs
Red Hat:enterprise_linux:3::as
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups
Red Hat:enterprise_linux:3::desktop
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups-devel
Red Hat:enterprise_linux:3::desktop
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups-libs
Red Hat:enterprise_linux:3::desktop
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups
Red Hat:enterprise_linux:3::es
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups-debuginfo
Red Hat:enterprise_linux:3::es
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups-devel
Red Hat:enterprise_linux:3::es
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups-libs
Red Hat:enterprise_linux:3::es
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups
Red Hat:enterprise_linux:3::ws
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups-debuginfo
Red Hat:enterprise_linux:3::ws
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups-devel
Red Hat:enterprise_linux:3::ws
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups-libs
Red Hat:enterprise_linux:3::ws
 before 1:1.1.17-13.3.24
1:1.1.17-13.3.24
cups
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-libs
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-libs
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-libs
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-libs
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
gpdf
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 0:2.8.2-4.3
0:2.8.2-4.3
xpdf
Red Hat:enterprise_linux:3::as
 before 1:2.02-9.5
1:2.02-9.5
xpdf-debuginfo
Red Hat:enterprise_linux:3::as
 before 1:2.02-9.5
1:2.02-9.5
xpdf
Red Hat:enterprise_linux:3::desktop
 before 1:2.02-9.5
1:2.02-9.5
xpdf-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 1:2.02-9.5
1:2.02-9.5
xpdf
Red Hat:enterprise_linux:3::es
 before 1:2.02-9.5
1:2.02-9.5
xpdf-debuginfo
Red Hat:enterprise_linux:3::es
 before 1:2.02-9.5
1:2.02-9.5
xpdf
Red Hat:enterprise_linux:3::ws
 before 1:2.02-9.5
1:2.02-9.5
xpdf-debuginfo
Red Hat:enterprise_linux:3::ws
 before 1:2.02-9.5
1:2.02-9.5
kdegraphics
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 7:3.3.1-3.3
7:3.3.1-3.3

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-0064 is a high vulnerability (CVSS 7.5) in Xpdf, published January 19, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.22%, the 94th percentile. Fixed in cups 1.1.22-6.

References

Show 86 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open