Read the docs
TI-2005-00050 Aliases CVE-2005-0064GHSA-h375-h7pm-622c

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and…

Priority MEDIUM 43Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.

Why it matters now

EPSS 0.07217 94th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 7 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 32

CPEVersionsRoleVendor
cpe:2.3:a:xpdf:xpdf:0.2:*:*:*:*:*:*:*0.2VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.3:*:*:*:*:*:*:*0.3VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.4:*:*:*:*:*:*:*0.4VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.5:*:*:*:*:*:*:*0.5VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.5a:*:*:*:*:*:*:*0.5aVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.6:*:*:*:*:*:*:*0.6VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.7:*:*:*:*:*:*:*0.7VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.7a:*:*:*:*:*:*:*0.7aVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.80:*:*:*:*:*:*:*0.80VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.90:*:*:*:*:*:*:*0.90VulnerableXpdf
  • cpe:2.3:a:xpdf:xpdf:0.2:*:*:*:*:*:*:* Versions 0.2 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.3:*:*:*:*:*:*:* Versions 0.3 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.4:*:*:*:*:*:*:* Versions 0.4 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.5:*:*:*:*:*:*:* Versions 0.5 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.5a:*:*:*:*:*:*:* Versions 0.5a Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.6:*:*:*:*:*:*:* Versions 0.6 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.7:*:*:*:*:*:*:* Versions 0.7 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.7a:*:*:*:*:*:*:* Versions 0.7a Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.80:*:*:*:*:*:*:* Versions 0.80 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.90:*:*:*:*:*:*:* Versions 0.90 Vulnerable ·Xpdf
Show 22 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:xpdf:xpdf:0.91:*:*:*:*:*:*:*0.91VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.91a:*:*:*:*:*:*:*0.91aVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.91b:*:*:*:*:*:*:*0.91bVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.91c:*:*:*:*:*:*:*0.91cVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.92:*:*:*:*:*:*:*0.92VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.92a:*:*:*:*:*:*:*0.92aVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.92b:*:*:*:*:*:*:*0.92bVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.92c:*:*:*:*:*:*:*0.92cVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.92d:*:*:*:*:*:*:*0.92dVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.92e:*:*:*:*:*:*:*0.92eVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.93:*:*:*:*:*:*:*0.93VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.93a:*:*:*:*:*:*:*0.93aVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.93b:*:*:*:*:*:*:*0.93bVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:0.93c:*:*:*:*:*:*:*0.93cVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:1.0:*:*:*:*:*:*:*1.0VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:1.0a:*:*:*:*:*:*:*1.0aVulnerableXpdf
cpe:2.3:a:xpdf:xpdf:1.1:*:*:*:*:*:*:*1.1VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:2.0:*:*:*:*:*:*:*2.0VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:2.1:*:*:*:*:*:*:*2.1VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:2.2:*:*:*:*:*:*:*2.2VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:2.3:*:*:*:*:*:*:*2.3VulnerableXpdf
cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*3.0VulnerableXpdf
  • cpe:2.3:a:xpdf:xpdf:0.91:*:*:*:*:*:*:* Versions 0.91 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.91a:*:*:*:*:*:*:* Versions 0.91a Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.91b:*:*:*:*:*:*:* Versions 0.91b Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.91c:*:*:*:*:*:*:* Versions 0.91c Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.92:*:*:*:*:*:*:* Versions 0.92 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.92a:*:*:*:*:*:*:* Versions 0.92a Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.92b:*:*:*:*:*:*:* Versions 0.92b Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.92c:*:*:*:*:*:*:* Versions 0.92c Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.92d:*:*:*:*:*:*:* Versions 0.92d Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.92e:*:*:*:*:*:*:* Versions 0.92e Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.93:*:*:*:*:*:*:* Versions 0.93 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.93a:*:*:*:*:*:*:* Versions 0.93a Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.93b:*:*:*:*:*:*:* Versions 0.93b Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:0.93c:*:*:*:*:*:*:* Versions 0.93c Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:1.0a:*:*:*:*:*:*:* Versions 1.0a Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:2.3:*:*:*:*:*:*:* Versions 2.3 Vulnerable ·Xpdf
  • cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Xpdf

Remediation

Red Hat 7 advisories

  • RHSA-2005:026 Released 2005-03-16 · Red Hat rating Moderate
    tetex security update
    • Red Hat Enterprise Linux AS version 4 tetex-2.0.2-22.EL4.4, tetex-2.0.2-22.EL4.4.i386, tetex-2.0.2-22.EL4.4.ia64 +25
    • Red Hat Enterprise Linux Desktop version 4 tetex-2.0.2-22.EL4.4, tetex-2.0.2-22.EL4.4.i386, tetex-afm-2.0.2-22.EL4.4 +11
    • Red Hat Enterprise Linux ES version 4 tetex-2.0.2-22.EL4.4, tetex-2.0.2-22.EL4.4.i386, tetex-2.0.2-22.EL4.4.ia64 +18
    • Red Hat Enterprise Linux WS version 4 tetex-2.0.2-22.EL4.4, tetex-2.0.2-22.EL4.4.i386, tetex-2.0.2-22.EL4.4.ia64 +18
  • RHSA-2005:066 Released 2005-02-15 · Red Hat rating Important
    kdegraphics security update
    • Red Hat Enterprise Linux AS version 4 kdegraphics-7:3.3.1-3.3, kdegraphics-7:3.3.1-3.3.i386, kdegraphics-7:3.3.1-3.3.ia64 +5
    • Red Hat Enterprise Linux Desktop version 4 kdegraphics-7:3.3.1-3.3, kdegraphics-7:3.3.1-3.3.i386, kdegraphics-devel-7:3.3.1-3.3 +1
    • Red Hat Enterprise Linux ES version 4 kdegraphics-7:3.3.1-3.3, kdegraphics-7:3.3.1-3.3.i386, kdegraphics-7:3.3.1-3.3.ia64 +3
    • Red Hat Enterprise Linux WS version 4 kdegraphics-7:3.3.1-3.3, kdegraphics-7:3.3.1-3.3.i386, kdegraphics-7:3.3.1-3.3.ia64 +3
  • RHSA-2005:057 Released 2005-02-15 · Red Hat rating Important
    gpdf security update
    • Red Hat Enterprise Linux AS version 4 gpdf-2.8.2-4.3, gpdf-2.8.2-4.3.i386, gpdf-2.8.2-4.3.ia64 +1
    • Red Hat Enterprise Linux Desktop version 4 gpdf-2.8.2-4.3, gpdf-2.8.2-4.3.i386
    • Red Hat Enterprise Linux ES version 4 gpdf-2.8.2-4.3, gpdf-2.8.2-4.3.i386, gpdf-2.8.2-4.3.ia64
    • Red Hat Enterprise Linux WS version 4 gpdf-2.8.2-4.3, gpdf-2.8.2-4.3.i386, gpdf-2.8.2-4.3.ia64
Show 4 more Red Hat advisories
  • RHSA-2005:053 Released 2005-02-15 · Red Hat rating Important
    CUPS security update
    • Red Hat Enterprise Linux AS version 4 cups-1:1.1.22-0.rc1.9.6, cups-1:1.1.22-0.rc1.9.6.i386, cups-1:1.1.22-0.rc1.9.6.ia64 +9
    • Red Hat Enterprise Linux Desktop version 4 cups-1:1.1.22-0.rc1.9.6, cups-1:1.1.22-0.rc1.9.6.i386, cups-devel-1:1.1.22-0.rc1.9.6 +3
    • Red Hat Enterprise Linux ES version 4 cups-1:1.1.22-0.rc1.9.6, cups-1:1.1.22-0.rc1.9.6.i386, cups-1:1.1.22-0.rc1.9.6.ia64 +6
    • Red Hat Enterprise Linux WS version 4 cups-1:1.1.22-0.rc1.9.6, cups-1:1.1.22-0.rc1.9.6.i386, cups-1:1.1.22-0.rc1.9.6.ia64 +6
  • RHSA-2005:034 Released 2005-02-15 · Red Hat rating Important
    xpdf security update
    • Red Hat Enterprise Linux AS version 4 xpdf-1:3.00-11.5, xpdf-1:3.00-11.5.i386, xpdf-1:3.00-11.5.ia64 +1
    • Red Hat Enterprise Linux Desktop version 4 xpdf-1:3.00-11.5, xpdf-1:3.00-11.5.i386
    • Red Hat Enterprise Linux ES version 4 xpdf-1:3.00-11.5, xpdf-1:3.00-11.5.i386, xpdf-1:3.00-11.5.ia64
    • Red Hat Enterprise Linux WS version 4 xpdf-1:3.00-11.5, xpdf-1:3.00-11.5.i386, xpdf-1:3.00-11.5.ia64
  • RHSA-2005:049 Released 2005-02-01 · Red Hat rating Important
    cups security update
    • Red Hat Desktop version 3 cups-1:1.1.17-13.3.24, cups-1:1.1.17-13.3.24.i386, cups-devel-1:1.1.17-13.3.24 +3
    • Red Hat Enterprise Linux AS version 3 cups-1:1.1.17-13.3.24, cups-1:1.1.17-13.3.24.i386, cups-1:1.1.17-13.3.24.ia64 +9
    • Red Hat Enterprise Linux ES version 3 cups-1:1.1.17-13.3.24, cups-1:1.1.17-13.3.24.i386, cups-1:1.1.17-13.3.24.ia64 +6
    • Red Hat Enterprise Linux WS version 3 cups-1:1.1.17-13.3.24, cups-1:1.1.17-13.3.24.i386, cups-1:1.1.17-13.3.24.ia64 +6
  • RHSA-2005:059 Released 2005-01-26 · Red Hat rating Important
    xpdf security update
    • Red Hat Desktop version 3 xpdf-1:2.02-9.5, xpdf-1:2.02-9.5.i386
    • Red Hat Enterprise Linux AS version 3 xpdf-1:2.02-9.5, xpdf-1:2.02-9.5.i386, xpdf-1:2.02-9.5.ia64 +1
    • Red Hat Enterprise Linux ES version 3 xpdf-1:2.02-9.5, xpdf-1:2.02-9.5.i386, xpdf-1:2.02-9.5.ia64
    • Red Hat Enterprise Linux WS version 3 xpdf-1:2.02-9.5, xpdf-1:2.02-9.5.i386, xpdf-1:2.02-9.5.ia64

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Desktop version 3Fixed RHSA-2005:049, RHSA-2005:059
Red Hat Enterprise Linux AS version 3Fixed RHSA-2005:049, RHSA-2005:059
Red Hat Enterprise Linux AS version 4Fixed RHSA-2005:026, RHSA-2005:034, RHSA-2005:053, RHSA-2005:057, RHSA-2005:066
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2005:026, RHSA-2005:034, RHSA-2005:053, RHSA-2005:057, RHSA-2005:066
Red Hat Enterprise Linux ES version 3Fixed RHSA-2005:049, RHSA-2005:059
Red Hat Enterprise Linux ES version 4Fixed RHSA-2005:026, RHSA-2005:034, RHSA-2005:053, RHSA-2005:057, RHSA-2005:066
Red Hat Enterprise Linux WS version 3Fixed RHSA-2005:049, RHSA-2005:059
Red Hat Enterprise Linux WS version 4Fixed RHSA-2005:026, RHSA-2005:034, RHSA-2005:053, RHSA-2005:057, RHSA-2005:066

Timeline

  1. 2026-10-02 Threatist record created from CVE-2005-0064
  2. 2026-10-03 Alias added: GHSA-h375-h7pm-622c

References

Exploit 1

Patch 11

Advisory 9

Other 2

  • TI-2003-00409 Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote… CVSS 2.0HIGH 7.5
  • TI-2004-00806 Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code… CVSS 2.0HIGH 10.0
  • TI-2004-00807 Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as… CVSS 2.0HIGH 10.0
  • TI-2004-01022 Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products… CVSS 2.0HIGH 9.3
  • TI-2007-05180 Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in… CVSS 2.0HIGH 9.3
  • TI-2007-05179 Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows… CVSS 2.0HIGH 9.3
See all 25 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences