CVE catalog

CVE-2003-0434

xpdf: CVE-2003-0434

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
40.94% · Oct 27, 2026

Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxpdfsid3.04+git20260802-1fixed
Debianxpdfforky3.04+git20260802-1fixed
Debianxpdftrixie3.04+git20250304-1fixed
Debianxpdfbookworm3.04+git20220601-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxpdfsourcesid2.02pl1-1not yet assignedNot reportedNot reported
Debianxpdfsourceforky2.02pl1-1not yet assignedNot reportedNot reported
Debianxpdfsourcetrixie2.02pl1-1not yet assignedNot reportedNot reported
Debianxpdfsourcebookworm2.02pl1-1not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [xpdf]Fixed

    Source package: [xpdf]

    Details (2)

    • 3.04+git20220601-1+b2 · amd64 · bookworm

      Fixed · Fixed: 2.02pl1-1

      dsa · xpdf · debian · bookworm; dsa · xpdf · debian · 12

    • 3.04+git20220601-1+b2 · arm64 · bookworm

      Fixed · Fixed: 2.02pl1-1

      dsa · xpdf · debian · bookworm; dsa · xpdf · debian · 12

[Debian 13 (Trixie)]

  • [xpdf]Fixed

    Source package: [xpdf]

    Details (2)

    • 3.04+git20250304-1+b1 · amd64 · trixie

      Fixed · Fixed: 2.02pl1-1

      dsa · xpdf · debian · 13

    • 3.04+git20250304-1+b1 · arm64 · trixie

      Fixed · Fixed: 2.02pl1-1

      dsa · xpdf · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]