CVE-2016-4991

🗓️ 28 Jul 2022 16:33:45Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 40 Views

Input to Pdf() function shell-escaped and passed to child_process.exec() during PDF rendering, leading to improper encoding of special characters, enabling command execution. Affects nodepdf 1.3.0

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2016-4991	28 Jul 202220:12	–	circl
CNNVD	NodePDF 命令注入漏洞	28 Jul 202200:00	–	cnnvd
Cvelist	CVE-2016-4991	28 Jul 202216:33	–	cvelist
EUVD	EUVD-2016-5957	7 Oct 202500:30	–	euvd
NVD	CVE-2016-4991	28 Jul 202217:15	–	nvd
OSV	CVE-2016-4991	28 Jul 202217:15	–	osv
Prion	Input validation	28 Jul 202217:15	–	prion
Positive Technologies	PT-2022-7868 · Nodepdf · Nodepdf	28 Jul 202200:00	–	ptsecurity
RedhatCVE	CVE-2016-4991	22 May 202502:15	–	redhatcve

NVD

Vulners

Node

nodepdf_project nodepdfMatch1.3.0node.js

[
  {
    "product": "nodepdf",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "nodepdf 1.3.0"
      }
    ]
  }
]