// For flags

CVE-2003-0434

Adobe Acrobat Reader (UNIX) 5.0 6 / Xpdf 0.9x Hyperlinks - Arbitrary Command Execution

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.

Varios visores de PDF, incluidos Adobe Acrobat 5.06 y Xpdf 1.01 permiten a atacantes remotos la ejecución arbitraria de comandos mediante metacaracteres de shell en un hipervínculo embebido.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2003-06-13 First Exploit
  • 2003-06-16 CVE Reserved
  • 2003-06-18 CVE Published
  • 2024-08-08 CVE Updated
  • 2024-10-26 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Adobe
Search vendor "Adobe"
Acrobat
Search vendor "Adobe" for product "Acrobat"
5.0.6
Search vendor "Adobe" for product "Acrobat" and version "5.0.6"
-
Affected
Xpdf
Search vendor "Xpdf"
Xpdf
Search vendor "Xpdf" for product "Xpdf"
1.1
Search vendor "Xpdf" for product "Xpdf" and version "1.1"
-
Affected
Mandrakesoft
Search vendor "Mandrakesoft"
Mandrake Linux
Search vendor "Mandrakesoft" for product "Mandrake Linux"
9.0
Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "9.0"
-
Affected
Mandrakesoft
Search vendor "Mandrakesoft"
Mandrake Linux
Search vendor "Mandrakesoft" for product "Mandrake Linux"
9.1
Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "9.1"
-
Affected
Mandrakesoft
Search vendor "Mandrakesoft"
Mandrake Linux Corporate Server
Search vendor "Mandrakesoft" for product "Mandrake Linux Corporate Server"
2.1
Search vendor "Mandrakesoft" for product "Mandrake Linux Corporate Server" and version "2.1"
-
Affected
Redhat
Search vendor "Redhat"
Enterprise Linux
Search vendor "Redhat" for product "Enterprise Linux"
2.1
Search vendor "Redhat" for product "Enterprise Linux" and version "2.1"
advanced_server
Affected
Redhat
Search vendor "Redhat"
Enterprise Linux
Search vendor "Redhat" for product "Enterprise Linux"
2.1
Search vendor "Redhat" for product "Enterprise Linux" and version "2.1"
enterprise_server
Affected
Redhat
Search vendor "Redhat"
Enterprise Linux
Search vendor "Redhat" for product "Enterprise Linux"
2.1
Search vendor "Redhat" for product "Enterprise Linux" and version "2.1"
workstation
Affected
Redhat
Search vendor "Redhat"
Linux
Search vendor "Redhat" for product "Linux"
7.1
Search vendor "Redhat" for product "Linux" and version "7.1"
-
Affected
Redhat
Search vendor "Redhat"
Linux
Search vendor "Redhat" for product "Linux"
7.2
Search vendor "Redhat" for product "Linux" and version "7.2"
-
Affected
Redhat
Search vendor "Redhat"
Linux
Search vendor "Redhat" for product "Linux"
7.3
Search vendor "Redhat" for product "Linux" and version "7.3"
-
Affected
Redhat
Search vendor "Redhat"
Linux
Search vendor "Redhat" for product "Linux"
8.0
Search vendor "Redhat" for product "Linux" and version "8.0"
-
Affected
Redhat
Search vendor "Redhat"
Linux
Search vendor "Redhat" for product "Linux"
9.0
Search vendor "Redhat" for product "Linux" and version "9.0"
-
Affected
Redhat
Search vendor "Redhat"
Linux Advanced Workstation
Search vendor "Redhat" for product "Linux Advanced Workstation"
2.1
Search vendor "Redhat" for product "Linux Advanced Workstation" and version "2.1"
itanium
Affected