CVE-2004-0630 The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell...
HighCVSS 10.0
EPSS 8.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters ("`" or backtick) in the filename of the PDF file that is provided to the uudecode command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 5.0 | No fix listed |
| Adobe Acrobat Reader | = 5.0.5 | No fix listed |
| Adobe Acrobat Reader | = 5.0.6 | No fix listed |
References
- GLSA-200408-14 vendor-advisory
- www.adobe.com
- 20040812 Adobe Acrobat Reader (Unix) Shell Metacharacter Code Execution Vulnerability third-party-advisory
- RHSA-2004:432 vendor-advisory
- 10931 patch vdb-entry vendor-advisory
- acrobat-reader-execute-code(16973) vdb-entry