KLA10274 ACE vulnerability in Nitro PDF

Improper memory writing was found in Nitro PDF. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed PDF.

Original advisories

Microsoft research

Related products

Nitro-PDF-Reader

Nitro-Pro

CVE list

CVE-2013-3552 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Nitro Pro versions 7.5.0.29 and earlierNitro Reader versions 2.5.0.45 and earlier