CVE-2003-0434
NoneCVSS
—
EPSS
40.9%
Published
Jul 24, 2003
CISA due date
—
The record
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | xpdf | 0 | 2.02pl1-1 |
| Debian:12 | xpdf | 0 | 2.02pl1-1 |
| Debian:13 | xpdf | 0 | 2.02pl1-1 |
Related vulnerabilities
- CVE-2011-1552 t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads… Also affects xpdf
- CVE-2011-0764 t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses… Also affects xpdf
- CVE-2009-3608 Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before… Also affects xpdf