Multiple plugins - Unauthenticated Dompdf Local File Inclusion (LFI)

Multiple plugins were found to be vulnerable to the Dompdf unauthenticated Local File Inclusion LFI vulnerability CVE-2014-2383. PoC...

Denial Of Service (DoS)

dompdf is vulnerable to denial of service DoS. The attack exists because dompdf.php does not handle the parsing of PHP file properly, allowing an attacker to consume memory by providing files such as dompdfconfig.inc.php...

CVE-2014-5012

DOMPDF before 0.6.2 allows denial of service...

DEBIAN-CVE-2014-5012

DOMPDF before 0.6.2 allows denial of service...

CVE-2014-5012

DOMPDF before 0.6.2 allows denial of service...

DEBIAN-CVE-2014-5011

DOMPDF before 0.6.2 allows Information Disclosure...

CVE-2014-5013

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

CVE-2014-5013

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

CVE-2014-5011

DOMPDF before 0.6.2 allows Information Disclosure...

CVE-2014-5011

DOMPDF before 0.6.2 allows Information Disclosure...

DEBIAN-CVE-2014-5013

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

Information disclosure

DOMPDF before 0.6.2 allows Information Disclosure...

CVE-2014-5011

DOMPDF before 0.6.2 allows Information Disclosure...

CVE-2014-5013

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

CVE-2014-5012

DOMPDF before 0.6.2 allows denial of service...

Denial of service

DOMPDF before 0.6.2 allows denial of service...

UBUNTU-CVE-2014-5011

DOMPDF before 0.6.2 allows Information Disclosure...

Remote code execution

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

UBUNTU-CVE-2014-5013

DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383...

UBUNTU-CVE-2014-5012

DOMPDF before 0.6.2 allows denial of service...