FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0630

This CVE name corresponds to:

Entered	Topic
2004-08-12	acroread uudecoder input validation error

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0630 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0630
Phase	Assigned(20040707)

Description

The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters ("`" or backtick) in the filename of the PDF file that is provided to the uudecode command.

References

Source	Reference
IDEFENSE	20040812 Adobe Acrobat Reader (Unix) Shell Metacharacter Code Execution Vulnerability
CONFIRM	http://www.adobe.com/support/techdocs/322914.html
GENTOO	GLSA-200408-14
REDHAT	RHSA-2004:432
BID	10931
XF	acrobat-reader-execute-code(16973)