Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.105
EPSS Ranking 92.8%