Nitro Software Nitro PDF Pro 权限许可和访问控制问题漏洞

Nitro Software Nitro PDF Pro is a software that can be used to create and edit PDF files from Nitro Software, Inc. in the United States. A privilege license and access control issue vulnerability exists in Nitro Software Nitro PDF Pro versions 13.70.7.60 and earlier and 14.18.1.41 and earlier,...

Nitro PDF Pro Local Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Local Privilege Escalation via MSI Installer product: Nitro PDF Pro vulnerable version: 14.26.1.0 13.70.8.82 fixed version: 14.26.1.0 or higher 13.70.8.82 or higher CVE...

PT-2024-26417

Name of the Vulnerable Software and Affected Versions Nitro PDF Pro versions prior to 13.70.8.82 Nitro PDF Pro versions 14.x prior to 14.26.1.0 Description The issue allows Local Privilege Escalation in the MSI Installer because custom actions occur unsafely in repair mode. CertUtil is run in a...

CVE-2013-2773

Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution...

Design/Logic Flaw

Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution...

CVE-2013-2773

Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution...

CVE-2019-19819

The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer Dereference via crafted Unicode content...

CVE-2019-19315

NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products, allows Elevation of Privilege via the \.\mailslot\nlsX86ccMailslot mailslot...

Privilege escalation

NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products, allows Elevation of Privilege via the \.\mailslot\nlsX86ccMailslot mailslot...

CVE-2019-19315

NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products, allows Elevation of Privilege via the \.\mailslot\nlsX86ccMailslot mailslot...

CVE-2019-19817

The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x2e8a Out-of-Bounds Read via crafted Unicode content...

CVE-2019-5045

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the...

CVE-2019-5048

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file...

CVE-2019-5047

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability...

Metasploit Wrapup

Slowloris: SMB edition Taking a page from the Slowloris HTTP DoS attack, the aptly named SMBLoris DoS attack exploits a vuln contained in many Windows releases back to Windows 2000 and also affects Samba a popular open source SMB implementation. Through creation of many connections to a target's...

SRC-2017-0005 : Nitro PDF Pro Doc.saveAs and App.launchURL Remote Code Execution Vulnerabilities

Vulnerability Details: These vulnerabilities allow remote attackers to execute arbitrary code on vulnerable installations of Nitro PDF Reader and Nitro PDF Reader Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious fil...

Nitro PDF Remote Code Execution Vulnerability

Nitro PDF is free PDF software. A remote code execution vulnerability exists in Nitro PDF. An attacker could exploit this vulnerability to execute arbitrary code in the environment of a user running in an affected application, and a failed attack would result in a denial of service...

Nitro Pro 10.5.7.32 / Nitro Reader 5.5.3.1 - Heap Memory Corruption

Application: Nitro PDF Platforms: Windows Versions: Nitro Pro 10.5.7.32 and lower & Nitro Reader 5.5.3.1 and lower Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch 1 Introduction 2 Report Timeline 3 Technical details 4 POC...

Nitro Pro 10.5.7.32 Nitro Reader 5.5.3.1 - Heap Memory Corruption

Nitro Pro 10.5.7.32 Nitro Reader 5.5.3.1 - Heap Memory Corruption Application: Nitro PDF Platforms: Windows Versions: Nitro Pro 10.5.7.32 and lower & Nitro Reader 5.5.3.1 and lower Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch 1...

Nitro Pro 10.5.7.32 & Nitro Reader 5.5.3.1 - Heap Memory Corruption

Exploit for windows platform in category dos / poc Application: Nitro PDF Platforms: Windows Versions: Nitro Pro 10.5.7.32 and lower & Nitro Reader 5.5.3.1 and lower Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch 1 Introduction 2...