PT-2000-1660 · Xpdf · Xpdf Pdf Viewer Client

Publicado 2000-10-20 · Atualizado 2016-10-18 · CVE-2000-0727

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xpdf PDF viewer client versions prior to 0.91

Description The issue concerns the xpdf PDF viewer client, where it fails to properly launch a web browser for embedded URLs. This allows an attacker to execute arbitrary commands via a URL containing shell metacharacters.

Recommendations For versions prior to 0.91, update to version 0.91 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2000-0727

Produtos afetados

Xpdf Pdf Viewer Client

Referências · 7

• http://securityfocus.com/bid/1624 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2000-060.html · Nota
• http://calderasystems.com/support/security/advisories/CSSA-2000-031.0.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0727 · Nota de Segurança
• http://debian.org/security/2000/20000910a · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=96886599829687&w=2 · Nota
• http://marc.info/?l=bugtraq&m=96766355023239&w=2 · Nota