CVE-2004-0630: Critical severity Adobe Acrobat reader vulnerability

Published Aug 14, 2004

Updated

The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters ("" or backtick) in the filename of the PDF file that is provided to the uudecode command.

Affected Software

3 affected components

Adobe Acrobat reader=5.0

Adobe Acrobat reader=5.0.5

Adobe Acrobat reader=5.0.6

Remediation

Patch Available

http://www.securityfocus.com/bid/10931

Event History

Aug 14, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0630?

CVE-2004-0630 is considered a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2004-0630?

To mitigate CVE-2004-0630, update Adobe Acrobat Reader to version 5.0.9 or later.

Which versions of Adobe Acrobat Reader are affected by CVE-2004-0630?

CVE-2004-0630 affects Adobe Acrobat Reader versions 5.0, 5.0.5, and 5.0.6.

What type of attack is possible with CVE-2004-0630?

CVE-2004-0630 allows remote attackers to execute arbitrary code via crafted PDF file names.

Is CVE-2004-0630 exploitable on all platforms?

CVE-2004-0630 has been reported as exploitable on Unix and Linux platforms, and potentially other versions.