Lucene search
HistoryOct 20, 2000 - 4:00 a.m.
CVE-2000-0727
cve-2000-0727
xpdf security vulnerability
arbitrary command execution
embedded url's flaw
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.2%
xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL’s, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters.
Affected configurations
Node
xpdfxpdfMatch0.90
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.2%
Related for CVE-2000-0727