Lucene search

K
cve[email protected]CVE-2004-0630
HistoryAug 18, 2004 - 4:00 a.m.

CVE-2004-0630

2004-08-1804:00:00
web.nvd.nist.gov
25
adobe
acrobat reader
cve-2004-0630
remote code execution
unix
linux
security vulnerability
pdf

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.137 Low

EPSS

Percentile

95.7%

The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters (“`” or backtick) in the filename of the PDF file that is provided to the uudecode command.

Affected configurations

NVD
Node
adobeacrobat_readerMatch5.0
OR
adobeacrobat_readerMatch5.0.5
OR
adobeacrobat_readerMatch5.0.6

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.137 Low

EPSS

Percentile

95.7%