CVE-2014-3741

Critical

Published: 23/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The printDirect function in the node-printer module version 0.0.1 and earlier allows remote attackers to execute arbitrary commands via unspecified characters in the lpr command.

Risk Assessment

Attackers may exploit this vulnerability to execute commands remotely, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to update the node-printer module to the latest version to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

The printDirect function in lib/printer.js in the node-printer module 0.0.1 and earlier for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in the lpr command.