CVE-2005-0064

CVE-2005-0064 describes a buffer overflow vulnerability in the Decrypt::makeFileKey2 function of xpdf version 3.00 and earlier. This flaw allows remote attackers to execute arbitrary code by crafting a malicious PDF file with an excessively large /Encrypt /Length keyLength value. With a CVSS score of 7.5, this vulnerability is considered highly severe, requiring no authentication and having low attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, suggesting it is not a widely targeted threat.