CVE-2014-3741 Potential Command Injection in printer
CriticalCVSS 9.8
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The printDirect function in lib/printer.js in the node-printer module 0.0.1 and earlier for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in the lpr command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm printer(npm) | <= 0.0.1 | No fix listed |
| node-printer project node-printer | <= 0.0.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com issue-tracking patch
- github.com
- www.npmjs.com
- [oss-security] 20140513 CVE request: various NodeJS module vulnerabilities mailing-list third-party-advisory
- [oss-security] 20140514 Re: CVE request: various NodeJS module vulnerabilities mailing-list third-party-advisory
- nodesecurity.io third-party-advisory