The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters ("`" or backtick) in the filename of the PDF file that is provided to the uudecode command.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade acroread5Upgrade acroread4Upgrade acroread | Dec 10, 2025 | Aug 12, 2004 |
| Gentoo Linux | — | Upgrade app-text/acroread. | Oct 30, 2017 | Aug 18, 2004 |
| Suse | — | Upgrade acroread | Dec 12, 2013 | Aug 18, 2004 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub