UBUNTU-CVE-2014-5012

DOMPDF before 0.6.2 allows denial of service...

UBUNTU-CVE-2014-5011

DOMPDF before 0.6.2 allows Information Disclosure...

CVE-2014-5011

DOMPDF before 0.6.2 allows Information Disclosure...

CVE-2014-5011

CVE-2014-5011 affects Dompdf prior to 0.6.2. The vulnerability arises from improper handling/validation of untrusted input when processing HTML content, enabling information disclosure. Impact is limited to affected Dompdf versions; remediation is upgrading to Dompdf 0.6.2 or later as indicated b...

CVE-2014-5011

DOMPDF before 0.6.2 allows Information Disclosure...

CVE-2014-5012

DOMPDF before 0.6.2 allows denial of service...

CVE-2014-5012

DOMPDF before 0.6.2 allows denial of service...

CVE-2014-5012

CVE-2014-5012 affects Dompdf up to version 0.6.2; faulty input handling allows denial of service during HTML-to-PDF processing. The provided documents confirm the vulnerability and a fix in v0.6.2 (GitHub release tag). No exploitation context or in-the-wild details are provided in the connected d...

CVE-2014-5013

CVE-2014-5013 affects Dompdf prior to 0.6.2 and allows remote code execution; the issue is linked to CVE-2014-2383. The related advisories indicate a security-focused 0.6.2 release that addresses multiple vulnerabilities in dompdf (including RCE and information-disclosure issues) and recommends u...

CVE-2014-5013

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

CVE-2014-5013

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

PT-2020-7697 · Dompdf +2 · Dompdf +2

Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows remote code execution. It is related to a previously identified problem. Recommendations: For versions prior to 0.6.2, update to version 0.6.2 or later to resolve the issue...

CVE-2014-5012: Undefined Security Weakness

DOMPDF before 0.6.2 allows denial of service...

DOMPDF Remote Code Execution Vulnerability

DOMPDF is a converter to convert HTML to PDF. A remote code execution vulnerability exists in DOMPDF versions prior to 0.6.2. No details of the vulnerability are provided at this time...

CVE-2014-5011: Exposure of Sensitive Information to an Unauthorized Actor

DOMPDF before 0.6.2 allows Information Disclosure...

DOMPDF Information Disclosure Vulnerability

DOMPDF is a converter to convert HTML to PDF. An information disclosure vulnerability exists in versions of DOMPDF prior to 0.6.2. The vulnerability stems from a configuration or other error in the operation of a networked system or product. An unauthorized attacker could exploit the vulnerabilit...

CVE-2014-5013: Undefined Security Weakness

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

PT-2020-7695 · Dompdf +2 · Dompdf +2

Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows information disclosure. Recommendations: For versions prior to 0.6.2, update to version 0.6.2 or later to resolve the issue...

PT-2020-7696 · Dompdf +2 · Dompdf +2

Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows for a denial of service. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...

Cross-site Scripting (XSS)

dompdf is vulnerable to cross-site scripting XSS attacks. The library does not filter user-supplied strings through uploaded pdf files, allowing a malicious user to inject and execute arbitrary web script...