Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
Affected Platforms
Adobe AcrobatXpdf XpdfMandrakesoft Mandrake Linux Corporate ServerMandrakesoft Mandrake LinuxRedhat Enterprise LinuxRedhat Linux Advanced WorkstationRedhat Linux