Vulnerability Details : CVE-2003-0434
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
Products affected by CVE-2003-0434
- cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*
- cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*
- cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*
- cpe:2.3:a:adobe:acrobat:5.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:xpdf:xpdf:1.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2003-0434
5.52%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 93 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2003-0434
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2003-0434
-
http://marc.info/?l=bugtraq&m=105777963019186&w=2
'xpdf vulnerability - CAN-2003-0434' - MARC
-
http://www.mandriva.com/security/advisories?name=MDKSA-2003:071
Mandriva
-
http://www.redhat.com/support/errata/RHSA-2003-196.html
SupportPatch;Vendor Advisory
-
http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005719.html
[Full-Disclosure] Mailing List Charter
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A664
404 Not Found
-
http://www.kb.cert.org/vuls/id/200132
VU#200132 - Various UNIX and Linux PDF readers/viewers execute commands embedded within hyperlinksUS Government Resource
-
http://www.redhat.com/support/errata/RHSA-2003-197.html
SupportPatch;Vendor Advisory
Jump to