8.8
CVSSv3

CVE-2017-7442

Published: 03/08/2017 Updated: 04/08/2020
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Nitro Pro 11.0.3.173 allows remote malicious users to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gonitro nitro pro 11.0.3.173

Exploits

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpServer::HTML include Msf::Exploit::FileDropper include Msf::Exploit::FILEFORMAT include Msf::E ...