CVE-2004-0630
First published: Sat Aug 14 2004(Updated: )
The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters ("`" or backtick) in the filename of the PDF file that is provided to the uudecode command.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | =5.0 | |
| Adobe Acrobat Reader | =5.0.5 | |
| Adobe Acrobat Reader | =5.0.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/10931
- http://security.gentoo.org/glsa/glsa-200408-14.xml
- http://www.adobe.com/support/techdocs/322914.html
- http://www.redhat.com/support/errata/RHSA-2004-432.html
- http://www.idefense.com/application/poi/display?id=124&type=vulnerabilities
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16973
Frequently Asked Questions
What is the severity of CVE-2004-0630?
CVE-2004-0630 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2004-0630?
To mitigate CVE-2004-0630, update Adobe Acrobat Reader to version 5.0.9 or later.
Which versions of Adobe Acrobat Reader are affected by CVE-2004-0630?
CVE-2004-0630 affects Adobe Acrobat Reader versions 5.0, 5.0.5, and 5.0.6.
What type of attack is possible with CVE-2004-0630?
CVE-2004-0630 allows remote attackers to execute arbitrary code via crafted PDF file names.
Is CVE-2004-0630 exploitable on all platforms?
CVE-2004-0630 has been reported as exploitable on Unix and Linux platforms, and potentially other versions.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/remedy
- agent/first-publish-date
- agent/description
- agent/tags
- agent/event
- agent/source
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/5.0
- version/adobe acrobat reader/5.0.5
- version/adobe acrobat reader/5.0.6