Lucene search
TalosCVELIST:CVE-2020-6074HistoryMay 18, 2020 - 4:13 p.m.
CVE-2020-6074
2020-05-1816:13:41
talos
www.cve.org
3
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.745
Percentile
98.1%
An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155. A specially crafted PDF document can cause a use-after-free which can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.
CNA Affected
[
{
"product": "Nitro Pro",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Nitro Pro 13.9.1.155"
}
]
}
]Related
nvd
nvd
CVE-2020-6074
2020-05-18 17:15:10
cve
cve
CVE-2020-6074
2020-05-18 17:15:10
checkpoint_advisories
checkpoint_advisories
Nitro Pro PDF Use After Free (CVE-2020-6074)
2020-10-28 00:00:00
talos
talos
Nitro PRO PDF nested pages remote code execution vulnerability
2020-05-18 00:00:00
prion
prion
Remote code execution
2020-05-18 17:15:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.745
Percentile
98.1%
Related for CVELIST:CVE-2020-6074