GHSA-RV7P-MMWQ-X674 Improper Input Validation and Code Injection in pdf-image

Lack of input validation in pdf-image npm package version = 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input...

agneta-platform (>=0.13.0-beta.1 <=0.13.0-beta.9), aon (>=0.0.2 <=0.3.2) +6 more potentially affected by CVE-2018-3757 via pdf-image (=1.1.0)

pdf-image NPM version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdf-image and may be impacted: - agneta-platform =0.13.0-beta.1, =0.0.2, =0.0.2, =0.1.1, =0.3.0, =0.1.1, =1.0.0, =0.0.1, =0.0.3 Source cves: CVE-2018-3757 Source advisory:...

Command Injection in pdf-image

Versions of pdf-image before 2.0.0 are vulnerable to command injection. This vulnerability is exploitable if the attacker has control over the pdfFilePath variable passed into pdf-image. Recommendation Update to version 2.0.0 or later...

GHSA-5GWH-G79J-VH4Q Command Injection in pdf-image

Versions of pdf-image before 2.0.0 are vulnerable to command injection. This vulnerability is exploitable if the attacker has control over the pdfFilePath variable passed into pdf-image. Recommendation Update to version 2.0.0 or later...

The vulnerability in the implementation of the WritePDFImage function in ImageMagick and GraphicsMagick graphic editors allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the WritePDFImage function in ImageMagick and GraphicsMagick graphic editors is related to resource management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created image...

Description of the Microsoft Office 2008 for Mac 12.1.3 Update

Describes the changes that the Office 2008 for Mac 12.1.3 Update makes to Office 2008 for Mac programs.INTRODUCTIONMicrosoft has released security bulletin MS08-057. This security bulletin contains all the relevant information about the security updates for Microsoft Office 2008 for Mac. To view...

ImageMagick: Memory leak in the WritePDFImage function in coders/pdf.c

In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c...

CVE-2020-8132

Lack of input validation in pdf-image npm package version = 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input...

CVE-2020-8132

Lack of input validation in pdf-image npm package version = 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input...

CVE-2020-8132

The CVE-2020-8132 issue affects the npm package pdf-image (version where

CVE-2020-8132

Lack of input validation in pdf-image npm package version = 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input...

Node.js third-party modules: Several simple remote code execution in pdf-image

I would like to report "A simple remote code execution" in "pdf-image". It allows "a remote attacker to execute arbitrary code when several functions of the PDFImage class are called and the class loaded from user-input value". Module module name: pdf-image version: latest npm page:...

Security update for GraphicsMagick (low)

openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:0235-1 Rating: low References: 1124366 Cross-References: CVE-2019-7397 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description: This update for...

The vulnerability of the GetInfoCommand function in the PDF file conversion software pdf-image for Node.js allows a hacker to execute arbitrary commands on the server.

The vulnerability of the GetInfoCommand function in the PDF conversion software for Node.js lies in the lack of mechanisms to neutralize special elements in the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

pdf-image command injection vulnerability

pdf-image is a package that can use ImageMagick to convert PDF files to png files in Node.js. A command injection vulnerability exists in pdf-image version 2.0.0. An attacker can exploit this vulnerability to execute commands...

Command Injection

Overview Versions of pdf-image before 2.0.0 are vulnerable to command injection. This vulnerability is exploitable if the attacker has control over the pdfFilePath variable passed into pdf-image. Recommendation Update to version 2.0.0 or later. References - HackerOne Report - GitHub Advisory...

CVE-2018-3757

Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter...

CVE-2018-3757

Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter...

Command injection

Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter...

CVE-2018-3757

pdf-image prior to 2.0.0 is vulnerable to command injection via an unescaped pdfFilePath parameter, enabling arbitrary shell commands to be executed (RCE). Impact is consistent with remote code execution if an attacker controls the input. The recommended remediation is to upgrade to version 2.0.0...