67 matches found
GHSA-RV7P-MMWQ-X674 Improper Input Validation and Code Injection in pdf-image
Lack of input validation in pdf-image npm package version = 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input...
Improper Input Validation and Code Injection in pdf-image
Lack of input validation in pdf-image npm package version = 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input...
GHSA-5GWH-G79J-VH4Q Command Injection in pdf-image
Versions of pdf-image before 2.0.0 are vulnerable to command injection. This vulnerability is exploitable if the attacker has control over the pdfFilePath variable passed into pdf-image. Recommendation Update to version 2.0.0 or later...
Command Injection in pdf-image
Versions of pdf-image before 2.0.0 are vulnerable to command injection. This vulnerability is exploitable if the attacker has control over the pdfFilePath variable passed into pdf-image. Recommendation Update to version 2.0.0 or later...
The vulnerability in the implementation of the WritePDFImage function in ImageMagick and GraphicsMagick graphic editors allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the WritePDFImage function in ImageMagick and GraphicsMagick graphic editors is related to resource management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created image...
Description of the Microsoft Office 2008 for Mac 12.1.3 Update
Describes the changes that the Office 2008 for Mac 12.1.3 Update makes to Office 2008 for Mac programs.INTRODUCTIONMicrosoft has released security bulletin MS08-057. This security bulletin contains all the relevant information about the security updates for Microsoft Office 2008 for Mac. To view...
ImageMagick: Memory leak in the WritePDFImage function in coders/pdf.c
In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c...
CVE-2020-8132
Lack of input validation in pdf-image npm package version = 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input...
CVE-2020-8132
Lack of input validation in pdf-image npm package version = 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input...
CVE-2020-8132
The CVE-2020-8132 issue affects the npm package pdf-image (version where
CVE-2020-8132
Lack of input validation in pdf-image npm package version = 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input...
Node.js third-party modules: Several simple remote code execution in pdf-image
I would like to report "A simple remote code execution" in "pdf-image". It allows "a remote attacker to execute arbitrary code when several functions of the PDFImage class are called and the class loaded from user-input value". Module module name: pdf-image version: latest npm page:...
Security update for GraphicsMagick (low)
openSUSE Security Update: Security update for GraphicsMagick Announcement ID: openSUSE-SU-2019:0235-1 Rating: low References: 1124366 Cross-References: CVE-2019-7397 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description: This update for...
The vulnerability of the GetInfoCommand function in the PDF file conversion software pdf-image for Node.js allows a hacker to execute arbitrary commands on the server.
The vulnerability of the GetInfoCommand function in the PDF conversion software for Node.js lies in the lack of mechanisms to neutralize special elements in the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...
pdf-image command injection vulnerability
pdf-image is a package that can use ImageMagick to convert PDF files to png files in Node.js. A command injection vulnerability exists in pdf-image version 2.0.0. An attacker can exploit this vulnerability to execute commands...
Command Injection
Overview Versions of pdf-image before 2.0.0 are vulnerable to command injection. This vulnerability is exploitable if the attacker has control over the pdfFilePath variable passed into pdf-image. Recommendation Update to version 2.0.0 or later. References - HackerOne Report - GitHub Advisory...
CVE-2018-3757
Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter...
Command injection
Command injection exists in pdf-image v2.0.0 due to an unescaped string parameter...