CVE-2003-0434: Adobe Acrobat

High severity, CVSS 7.5. EPSS: 40.9% chance of exploitation in the next 30 days.

Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.

Affected products

• Adobe Acrobat: version 5.0.6 only
• Mandrakesoft Mandrake Linux: version 9.0 only; version 9.1 only
• Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only
• Red Hat Enterprise Linux: version 2.1 only
• Red Hat Linux: version 7.1 only; version 7.2 only; version 7.3 only; version 8.0 only; version 9.0 only
• Red Hat Linux Advanced Workstation: version 2.1 only
• Xpdf Xpdf: version 1.1 only

Published 2003-07-24. Last modified 2026-06-16.