CVE-2003-0434
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to...
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
Exploit likelihood
What each source reports
NVD Score used
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
- Record
CVE-2003-0434- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
- Record
CVE-2003-0434- Updated
- 2026-11-02
EUVDEUVD-2003-0428 No score
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
- Record
EUVD-2003-0428- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-857w-p662-mpmp No score
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to...
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
- Record
GHSA-857w-p662-mpmp- Updated
- 2026-11-02
OSV No score
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
- Record
CVE-2003-0434- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0434 No score
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
- Record
DEBIAN-CVE-2003-0434- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Adobe Acrobat Reader (UNIX) 5.0 6 / Xpdf 0.9x Hyperlinks - Arbitrary Command Execution | 2003-06-13 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0434 is a high vulnerability (CVSS 7.5) in Adobe Acrobat, published June 18, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 40.9%, the 98th percentile. Fixed in xpdf 2.02pl1-1.
References
secunia.com/advisories/9038
mandriva.com/security/advisories?name=MDKSA-2003:071
kb.cert.org/vuls/id/200132
lists.grok.org.uk/pipermail/full-disclosure/2003-June/005719.html
redhat.com/support/errata/RHSA-2003-196.html