PT-2014-4669 · Dompdf · Dompdf

Published 2014-04-28 · Updated 2023-02-02 · CVE-2014-2383

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions dompdf versions prior to 0.6.1

Description The issue allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input file parameter. This can be demonstrated by using a php://filter/read=convert.base64-encode/resource in the input file parameter when DOMPDF ENABLE PHP is enabled.

Recommendations For versions prior to 0.6.1, update to version 0.6.1 or later to resolve the issue. As a temporary workaround, consider disabling the DOMPDF ENABLE PHP option to minimize the risk of exploitation. Restrict access to the input file parameter to prevent attackers from bypassing chroot protections. Avoid using the php://filter/read=convert.base64-encode/resource wrapper in the input file parameter until the issue is resolved.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-2383

GHSA-QR6Q-W4GJ-3865

Affected Products

Dompdf

References · 19

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/dompdf/dompdf/CVE-2014-2383.yaml · Exploit
• 🔥 https://exploit-db.com/exploits/33004 · Exploit
• https://github.com/dompdf/dompdf/commit/23a693993299e669306929e3d49a4a1f7b3fb028 · Patch
• https://ubuntu.com/security/CVE-2014-2383 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2383 · Security Note
• https://osv.dev/vulnerability/GHSA-qr6q-w4gj-3865 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-2383 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-2383 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-2383 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-2383 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-2383 · Vendor Advisory
• https://github.com/dompdf/dompdf · Note
• http://securityfocus.com/archive/1/531912/100/0/threaded · Note
• https://explore.avertium.com/resource/lfi-rfi-escalation-to-rce · Note
• https://t.me/cvenotify/43434 · Telegram Post