NVD

Id
73564  
Name
CVE-2003-0434  
Description
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2003-07-24  
Modified Date
2016-10-17  
Seq
2003-0434  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
378666 73564 CVE-2003-0434 20030613 -10Day CERT Advisory on PDF Files  View
378667 73564 CVE-2003-0434 20030709 xpdf vulnerability - CAN-2003-0434  View
378668 73564 CVE-2003-0434 oval:org.mitre.oval:def:664  View
378669 73564 CVE-2003-0434 VU#200132  View
378670 73564 CVE-2003-0434 MDKSA-2003:071  View
378671 73564 CVE-2003-0434 RHSA-2003:196  View
378672 73564 CVE-2003-0434 RHSA-2003:197  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63457 JVNDB-2003-000183 Xpdf における不適切な mailto URI のパラメータによる任意のコマンドを実行される脆弱性 Xpdf には PDF ファイル内に含まれる mailto URI に対する妥当性を十分に確認せず、そのままシェルに引き渡してしまう脆弱性が存在します。 CVE-2003-0434 7260 CVE-2003-0434 73564 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000183.html 2003-06-14 2007-04-01 View