Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2005-0064HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0064
2005-05-0204:00:00
Debian Security Bug Tracker
security-tracker.debian.org
18
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.096 Low
EPSS
Percentile
94.7%
Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | cups | < 1.1.22-6 | cups_1.1.22-6_all.deb |
| Debian | 11 | all | cups | < 1.1.22-6 | cups_1.1.22-6_all.deb |
| Debian | 10 | all | cups | < 1.1.22-6 | cups_1.1.22-6_all.deb |
| Debian | 999 | all | cups | < 1.1.22-6 | cups_1.1.22-6_all.deb |
| Debian | 13 | all | cups | < 1.1.22-6 | cups_1.1.22-6_all.deb |
| Debian | 12 | all | xpdf | < 3.00-13 | xpdf_3.00-13_all.deb |
| Debian | 11 | all | xpdf | < 3.00-13 | xpdf_3.00-13_all.deb |
| Debian | 10 | all | xpdf | < 3.00-13 | xpdf_3.00-13_all.deb |
| Debian | 999 | all | xpdf | < 3.00-13 | xpdf_3.00-13_all.deb |
| Debian | 13 | all | xpdf | < 3.00-13 | xpdf_3.00-13_all.deb |
Related
nessus
nessus
FreeBSD : xpdf -- makeFileKey2() buffer overflow vulnerability (f755545e-6fcd-11d9-abec-00061bd2d56f)
2005-07-13 00:00:00
Mandrake Linux Security Advisory : kdegraphics (MDKSA-2005:020)
2005-01-26 00:00:00
Mandrake Linux Security Advisory : xpdf (MDKSA-2005:017)
2005-01-26 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200501-32 (kpdf, koffice)
2008-09-24 00:00:00
Debian: Security Advisory (DSA-648-1)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200502-10 (pdftohtml)
2008-09-24 00:00:00
redhat
redhat
(RHSA-2005:049) cups security update
2005-02-01 00:00:00
(RHSA-2005:059) xpdf security update
2005-01-26 00:00:00
(RHSA-2005:026) tetex security update
2005-03-16 00:00:00
ubuntucve
ubuntucve
CVE-2005-0064
2005-05-02 00:00:00
debian
debian
[SECURITY] [DSA 645-1] New CUPS packages fix arbitrary code execution
2005-01-19 07:45:43
[SECURITY] [DSA 648-1] New xpdf packages fix arbitrary code execution
2005-01-19 13:40:49
[SECURITY] [DSA 648-1] New xpdf packages fix arbitrary code execution
2005-01-19 13:40:49
osv
osv
cupsys - buffer overflow
2005-01-19 00:00:00
xpdf - buffer overflow
2005-01-19 00:00:00
gentoo
gentoo
pdftohtml: Vulnerabilities in included Xpdf
2005-02-09 00:00:00
libextractor: Multiple overflow vulnerabilities
2005-06-09 00:00:00
Xpdf, GPdf: Stack overflow in Decrypt::makeFileKey2
2005-01-21 00:00:00
ubuntu
ubuntu
xpdf, CUPS vulnerabilities
2005-01-19 00:00:00
securityvulns
securityvulns
iDEFENSE Security Advisory 01.18.05 - Multiple Unix/Linux Vendor Xpdf makeFileKey2 Stack Overflow
2005-01-19 00:00:00
[ GLSA 200506-06 ] libextractor: Multiple overflow vulnerabilities
2005-06-10 00:00:00
[ GLSA 200501-31 ] teTeX, pTeX, CSTeX: Multiple vulnerabilities
2005-01-26 00:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: cups-1.2.8-1.fc5
2007-03-14 20:14:24
altlinux
altlinux
Security fix for the ALT Linux 5 package xpdf version 3.00-alt5pl3
2005-01-19 00:00:00
freebsd
freebsd
xpdf -- makeFileKey2() buffer overflow vulnerability
2005-01-06 00:00:00
cve
cve
CVE-2005-0064
2005-05-02 04:00:00
oraclelinux
oraclelinux
kdegraphics security update
2006-11-30 00:00:00
cert
cert
mod_python vulnerable to information disclosure via crafted URL
2005-02-21 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.096 Low
EPSS
Percentile
94.7%
Related for DEBIANCVE:CVE-2005-0064