Nitro Software Nitro PDF Pro 权限许可和访问控制问题漏洞

Nitro Software Nitro PDF Pro is a software that can be used to create and edit PDF files from Nitro Software, Inc. in the United States. A privilege license and access control issue vulnerability exists in Nitro Software Nitro PDF Pro versions 13.70.7.60 and earlier and 14.18.1.41 and earlier,...

Nitro PDF Pro Local Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Local Privilege Escalation via MSI Installer product: Nitro PDF Pro vulnerable version: 14.26.1.0 13.70.8.82 fixed version: 14.26.1.0 or higher 13.70.8.82 or higher CVE...

PT-2024-26417

Name of the Vulnerable Software and Affected Versions Nitro PDF Pro versions prior to 13.70.8.82 Nitro PDF Pro versions 14.x prior to 14.26.1.0 Description The issue allows Local Privilege Escalation in the MSI Installer because custom actions occur unsafely in repair mode. CertUtil is run in a...