Vulnerability in Adobe Acrobat
CVE-2003-0434
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
EPSS: 0.409 (98.5th percentile) — read the EPSS interpretation.
Affected products
- Adobe Acrobat — versions 5.0.6
- Mandrakesoft Mandrake_linux — versions 9.0, 9.1
- Mandrakesoft Mandrake_linux_corporate_server — versions 2.1
- Xpdf — versions 1.1
- Redhat Enterprise_linux — versions 2.1
- Redhat Linux — versions 7.1, 7.2, 7.3
- Redhat Linux_advanced_workstation — versions 2.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)