PT-2000-1660 · Xpdf · Xpdf Pdf Viewer Client

Published 2000-10-20 · Updated 2016-10-18 · CVE-2000-0727

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xpdf PDF viewer client versions prior to 0.91

Description The issue concerns the xpdf PDF viewer client, where it fails to properly launch a web browser for embedded URLs. This allows an attacker to execute arbitrary commands via a URL containing shell metacharacters.

Recommendations For versions prior to 0.91, update to version 0.91 or later to resolve the issue.

Fix

Related Identifiers

CVE-2000-0727

Affected Products

Xpdf Pdf Viewer Client

References · 7

• http://securityfocus.com/bid/1624 · Vendor Advisory
• http://calderasystems.com/support/security/advisories/CSSA-2000-031.0.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0727 · Security Note
• http://debian.org/security/2000/20000910a · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2000-060.html · Note
• http://marc.info/?l=bugtraq&m=96886599829687&w=2 · Note
• http://marc.info/?l=bugtraq&m=96766355023239&w=2 · Note