Lucene search
+L

7 matches found

OSV
OSV
•added 2019/10/09 9:15 p.m.•11 views

CVE-2019-5047

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability...

7.8CVSS7.1AI score0.01331EPSS
SaveExploits1References1
NVD
NVD
•added 2019/10/09 9:15 p.m.•24 views

CVE-2019-5047

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability...

7.8CVSS7.5AI score0.01331EPSS
SaveExploits1References1
Prion
Prion
•added 2019/10/09 9:15 p.m.•29 views

Type confusion

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability...

6.8CVSS7.5AI score0.01331EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/10/09 8:40 p.m.•34 views

CVE-2019-5047

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability...

7.5CVSS7.6AI score0.01331EPSS
SaveExploits1References1
CVE
CVE
•added 2019/10/09 8:40 p.m.•97 views

CVE-2019-5047

The vulnerability CVE-2019-5047 affects NitroPDF, specifically the CharProcs parsing path, where a crafted PDF can trigger a type confusion leading to a Use After Free. Talos advisories (TALOS-2019-0816) document an exploitable Use After Free in NitroPDF’s CharProcs parsing, with NitroPDF 12.12.1...

7.8CVSS7.5AI score0.01331EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/09 12:00 a.m.•3 views

CVE-2019-5047: Use After Free

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability...

7.8CVSS7.3AI score0.01331EPSS
SaveExploits1References4
Talos
Talos
•added 2019/10/09 12:00 a.m.•117 views

NitroPDF CharProcs Remote Code Execution Vulnerability

Summary An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability. Tested Versions NitroPDF 12.2.1.52...

7.8CVSS7.6AI score0.01331EPSS
SaveExploits1
Rows per page
Query Builder