NVD

Id
65844  
Name
CVE-2005-0064  
Description
Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-05-02  
Modified Date
2016-12-19  
Seq
2005-0064  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342962 65844 CVE-2005-0064 ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl3.patch  View
342963 65844 CVE-2005-0064 SCOSA-2005.42  View
342964 65844 CVE-2005-0064 CLA-2005:921  View
342965 65844 CVE-2005-0064 20050119 [USN-64-1] xpdf, CUPS vulnerabilities  View
342966 65844 CVE-2005-0064 oval:org.mitre.oval:def:11781  View
342967 65844 CVE-2005-0064 DSA-645  View
342968 65844 CVE-2005-0064 DSA-648  View
342969 65844 CVE-2005-0064 20050118 Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow  View
342970 65844 CVE-2005-0064 MDKSA-2005:016  View
342971 65844 CVE-2005-0064 MDKSA-2005:017  View
342972 65844 CVE-2005-0064 MDKSA-2005:018  View
342973 65844 CVE-2005-0064 MDKSA-2005:019  View
342974 65844 CVE-2005-0064 MDKSA-2005:020  View
342975 65844 CVE-2005-0064 MDKSA-2005:021  View
342976 65844 CVE-2005-0064 RHSA-2005:026  View
342977 65844 CVE-2005-0064 RHSA-2005:034  View
342978 65844 CVE-2005-0064 RHSA-2005:053  View
342979 65844 CVE-2005-0064 RHSA-2005:057  View
342980 65844 CVE-2005-0064 RHSA-2005:059  View
342981 65844 CVE-2005-0064 RHSA-2005:066  View
342982 65844 CVE-2005-0064 2005-0003  View
342983 65844 CVE-2005-0064 FLSA:2352  View
342984 65844 CVE-2005-0064 FLSA:2353  View
342985 65844 CVE-2005-0064 GLSA-200501-28  View
342986 65844 CVE-2005-0064 GLSA-200502-10  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61840 JVNDB-2005-000042 Xpdf の Decrypt::makeFileKey2() 関数におけるバッファオーバーフローの脆弱性 Xpdf には、Xref.cc の Xref::checkEncrypted 関数において、暗号鍵長を格納する "/Encrypt /Length" タグの境界チェックに不備があり、Decrypt.cc の Decrypt::makeFileKey2 関数の処理によりバッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-0064 11268 CVE-2005-0064 65844 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000042.html 2005-01-18 2007-04-01 View