First published: Thu Sep 11 2014(Updated: )
Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Dompdf | <=0.0.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-6235 has a high severity rating due to the potential for remote code execution.
To mitigate CVE-2014-6235, upgrade the ke DomPDF extension to version 0.0.5 or later.
CVE-2014-6235 affects the ke DomPDF extension for TYPO3 versions prior to 0.0.5.
Yes, CVE-2014-6235 allows remote attackers to execute arbitrary code.
Yes, a patch is available by updating the ke DomPDF extension to version 0.0.5 or higher.