CVE-2014-5013: Code Injection
Published Dec 7, 2015
·Updated
DOMPDF before 0.6.2 allows remote code execution, a related issue to CVE-2014-2383.
Other sources
Remote Code Execution (complement of CVE-2014-2383)
Affected Software
6 affected componentsFixes available
composer/dompdf/dompdf>=0.6, <0.6.2
0.6.2
ubuntu/php-dompdf<0.6.1+dfsg-2ubuntu1+
0.6.1+dfsg-2ubuntu1+
ubuntu/php-dompdf<0.6.2+dfsg-1, <0.6.1+dfsg-2+
0.6.2+dfsg-10.6.1+dfsg-2+
debian/php-dompdf
0.6.2+dfsg-30.6.2+dfsg-3+deb10u20.6.2+dfsg-3.12.0.3+dfsg-12.0.4+dfsg-1
composer/dompdf/dompdf>=0.6<0.6.2
0.6.2
Dompdf Project Dompdf<0.6.2
Event History
Dec 7, 2015
Advisory Published
12:07 AM
Jan 10, 2020
CVE Published
via Ubuntu·12:00 AM
CVE Published
via MITRE·05:25 AM
Data Sourced
via MITRE·05:25 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:41 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-5013?
The severity of CVE-2014-5013 is high.
2
How does CVE-2014-5013 allow remote code execution?
CVE-2014-5013 allows remote code execution in DOMPDF before version 0.6.2.
3
Which software versions are affected by CVE-2014-5013?
DOMPDF versions up to exclusive 0.6.2 are affected by CVE-2014-5013.
4
Where can I find the fix for CVE-2014-5013?
The fix for CVE-2014-5013 is available in DOMPDF version 0.6.2.
5
What is the Common Weakness Enumeration (CWE) for CVE-2014-5013?
The CWE for CVE-2014-5013 is CWE-94.