Unscored CVE-2000-0727 EUVD-2000-0722GHSA-9jjv-62gr-rmvp

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arb…

Published Oct 13, 2000 · Updated Aug 8, 2024 · Assigned by mitre

Description

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters.

References

20000829 MDKSA-2000:041 - xpdf update mailing-list
20000913 Conectiva Linux Security Announcement - xpdf mailing-list
20000910 xpdf: local exploit vendor-advisory
1624 vdb-entry
CSSA-2000-031.0 vendor-advisory
RHSA-2000:060 vendor-advisory