GHSA-xq29-jcj7-xg86

Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands

Source: GitHub Advisory Database (reviewed) High CVE-2010-4962

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	dmk/webkitpdf	< 1.1.4	1.1.4

Details

As written in the advisory (Markdown source, shown as plain text).

Unspecified vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2010-4962 advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/61058 web
https://github.com/DMKEBUSINESSGMBH/webkitpdf package
https://web.archive.org/web/20101218181134/http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015 web
https://web.archive.org/web/20111015170040/http://www.securityfocus.com/bid/42381 web
http://typo3.org/extensions/repository/view/webkitpdf/1.1.4 web