CVE-2003-0434

published 2003-07-24

CVE-2003-0434: Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an…

Priority P3 50 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

EXPLOIT

Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.

Affected

17 ranges

Vendor	Product	Version range	Fixed in
adobe	acrobat	—	—
debian	xpdf	< xpdf 2.02pl1-1 (bookworm)	xpdf 2.02pl1-1 (bookworm)
mandrakesoft	mandrake_linux	—	—
mandrakesoft	mandrake_linux	—	—
mandrakesoft	mandrake_linux_corporate_server	—	—
redhat	enterprise_linux	—	—
redhat	linux	—	—
redhat	linux	—	—
redhat	linux	—	—
redhat	linux	—	—
redhat	linux	—	—
redhat	linux_advanced_workstation	—	—
xpdf	xpdf	—	—
xpdf	xpdf	>= 0 < 2.02pl1-1	2.02pl1-1
xpdf	xpdf	>= 0 < 2.02pl1-1	2.02pl1-1
xpdf	xpdf	>= 0 < 2.02pl1-1	2.02pl1-1
xpdf	xpdf	>= 0 < 2.02pl1-1	2.02pl1-1

CVSS provenance

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

osv 7.5 HIGH

vendor_debian 7.5 HIGH

vendor_redhat 7.5 HIGH

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.