CVE

Id
9058  
CVE No.
CVE-2004-0630  
Status
Candidate  
Description
The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters ("`" or backtick) in the filename of the PDF file that is provided to the uudecode command.  
Phase
Assigned (20040707)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
58779 9058 CVE-2004-0630 IDEFENSE:20040812 Adobe Acrobat Reader (Unix) Shell Metacharacter Code Execution Vulnerability  View
58780 9058 CVE-2004-0630 URL:http://www.idefense.com/application/poi/display?id=124&type=vulnerabilities  View
58781 9058 CVE-2004-0630 CONFIRM:http://www.adobe.com/support/techdocs/322914.html  View
58782 9058 CVE-2004-0630 GENTOO:GLSA-200408-14  View
58783 9058 CVE-2004-0630 URL:http://security.gentoo.org/glsa/glsa-200408-14.xml  View
58784 9058 CVE-2004-0630 REDHAT:RHSA-2004:432  View
58785 9058 CVE-2004-0630 URL:http://www.redhat.com/support/errata/RHSA-2004-432.html  View
58786 9058 CVE-2004-0630 BID:10931  View
58787 9058 CVE-2004-0630 URL:http://www.securityfocus.com/bid/10931  View
58788 9058 CVE-2004-0630 XF:acrobat-reader-execute-code(16973)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62978 JVNDB-2004-000320 Adobe Acrobat Reader のファイル名の長さの取り扱いにおけるバッファオーバーフローの脆弱性 ------------ CVE-2004-0631 9058 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000320.html  View