CVE-2000-0727

HighCVSS 7.6/10Last modified Jun 16, 2026

Description

xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters.

Metrics

CVSS 2.0 7.6/10AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=96766355023239&w=2
http://marc.info/?l=bugtraq&m=96886599829687&w=2
http://www.calderasystems.com/support/security/advisories/CSSA-2000-031.0.txtPatch, Vendor Advisory
http://www.debian.org/security/2000/20000910aPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2000-060.html
http://www.securityfocus.com/bid/1624Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=96766355023239&w=2
http://marc.info/?l=bugtraq&m=96886599829687&w=2
http://www.calderasystems.com/support/security/advisories/CSSA-2000-031.0.txtPatch, Vendor Advisory
http://www.debian.org/security/2000/20000910aPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2000-060.html
http://www.securityfocus.com/bid/1624Patch, Vendor Advisory

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-07287.2xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.CVE-2000-07292.1FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header.CVE-2000-07304.6Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.CVE-2000-07315.0Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-07325.0Worm HTTP server allows remote attackers to cause a denial of service via a long URL.CVE-2000-073310.0Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execut CVE-2000-07345.0eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.CVE-2000-07355.0Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-t CVE-2000-07365.0Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-t CVE-2000-07374.6The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain adm CVE-2000-07385.0WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (period) at the CVE-2000-07395.0Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbi