CVE-2003-0434

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 40.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-07-24 · updated 2026-06-16

Description

Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.

Affected products

Adobe Acrobat for Edge: 5.0.6
Mandrakesoft Mandrake Linux: 9.0, 9.1
Mandrakesoft Mandrake Linux Corporate Server: 2.1
Red Hat Enterprise Linux: 2.1
RedHat Linux: 7.1, 7.2, 7.3, 8.0, 9.0
RedHat Linux Advanced Workstation: 2.1
Xpdf: 1.1

References

http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005719.html
http://marc.info/?l=bugtraq&m=105777963019186&w=2
http://secunia.com/advisories/9037
http://secunia.com/advisories/9038
http://www.kb.cert.org/vuls/id/200132
http://www.mandriva.com/security/advisories?name=MDKSA-2003:071
http://www.redhat.com/support/errata/RHSA-2003-196.html
http://www.redhat.com/support/errata/RHSA-2003-197.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A664
http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005719.html
http://marc.info/?l=bugtraq&m=105777963019186&w=2
http://secunia.com/advisories/9037

Get alerted when CVE-2003-0434 or the next vulnerability affects your stack