gonitro nitro pdf pro vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger t...

Gonitro Nitro Pdf Pro

6.8

CVSSv2

A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential code execution. An attacker can send the victim a specific PDF file to trigger this vulnerability...

Gonitro Nitro Pdf Pro

6.8

CVSSv2

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to tri...

Gonitro Nitro Pdf Pro 10.5.5.9

6.8

CVSSv2

An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a stack variable to go out of scope, resulting in the application dereferencing a stale pointer. This can lead to code ex...

Gonitro Nitro Pro 13.33.2.645 Gonitro Nitro Pro 13.31.0.605

6.8

CVSSv2

An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause an object containing the path to a document to be destroyed and then later reused, resulting in a use-after-free vulnerability, which can l...

Gonitro Nitro Pro 13.33.2.645 Gonitro Nitro Pro 13.31.0.605

6.8

CVSSv2

An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be stored in two different places. When closed, the document will result in the reference being released tw...

Gonitro Nitro Pro 13.33.2.645 Gonitro Nitro Pro 13.31.0.605

6.8

CVSSv2

An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when decoding sub-samples. While initializing tiles with sub-sample data, the application can miscalculate a pointer for the stri...

Gonitro Nitro Pro 13.16.2.300 Gonitro Nitro Pro 13.13.2.242

6.8

CVSSv2

An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating its cross-reference table. When processing an object stream from a PDF document, the application will perform a calculation in order ...

Gonitro Nitro Pro 13.16.2.300 Gonitro Nitro Pro 13.13.2.242

4.3

CVSSv2

Nitro Pro 11.0.3 and previous versions allows remote malicious users to cause a denial of service (application crash) via a crafted PCX file.

Gonitro Nitro Pro

1 EDB exploit

6.8

CVSSv2

Nitro Pro 11.0.3.173 allows remote malicious users to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.

Gonitro Nitro Pro 11.0.3.173

1 EDB exploit

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook