CVE-2000-0727

HighCVSS 7.6/10Last modified Jun 16, 2026

Description

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters.

Metrics

CVSS 2.0 7.6/10AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Oct 20, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-07287.2xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.CVE-2000-07292.1FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header.CVE-2000-07304.6Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.CVE-2000-07315.0Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-07325.0Worm HTTP server allows remote attackers to cause a denial of service via a long URL.CVE-2000-073310.0Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to executCVE-2000-07345.0eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.CVE-2000-07355.0Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-tCVE-2000-07365.0Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-tCVE-2000-07374.6The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain admCVE-2000-07385.0WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (period) at the CVE-2000-07395.0Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbi
CVE-2000-0727: High severity, CVSS 7.6 | Vulnix