CVE-2017-7442

Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences...

CVE-2017-7442

Summary (CVE-2017-7442) : Nitro Pro PDF Reader (version 11.0.3.173) is affected by a remote code execution vulnerability triggered via the Javascript API (saveAs and launchURL) that uses directory traversal sequences. Connected advisories describe a remote exploitation vector: convincing a user t...

Nitro Pro Arbitrary Code Execution Vulnerability

Nitro Pro is a U.S. company Nitro PDF production and management software. A security vulnerability exists in Nitro Pro version 11.0.3.173. A remote attacker can exploit this vulnerability to execute arbitrary code...

Nitro Pro PDF Reader 11.0.3.173 Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Nitro Pro PDF Reader 11.0.3.173 Javascript API Remote Code Execution', 'Description' = %q This module exploits an unsafe Javascript API implemente...

Nitro Pro PDF Reader 11.0.3.173 - Javascript API Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Nitro Pro PDF Reader 11.0.3.173 Javascript API Remote Code Execution', 'Description' = %q This module exploits an unsafe Javascript API implemente...

Nitro Pro PDF Reader 11.0.3.173 - Javascript API Remote Code Execution Exploit

Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Nitro Pro PDF Reader 11.0.3.173 Javascript API Remote Code Execution', 'Description' = %q...

Nitro Pro PDF Reader 11.0.3.173 Javascript API Remote Code Execution

This module exploits an unsafe Javascript API implemented in Nitro and Nitro Pro PDF Reader version 11. The saveAs Javascript API function allows for writing arbitrary files to the file system. Additionally, the launchURL function allows an attacker to execute local files on the file system and...

Nitro Pro PDF - Multiple Vulnerabilities

Vulnerabilities Summary The following advisory describes three vulnerabilities found in Nitro / Nitro Pro PDF. Nitro Pro is the PDF reader and editor that does everything you will ever need to do with PDF files. The powerful but snappy editor lets you change PDF documents with ease, and comes wit...

Nitro Pro Denial of Service Vulnerability

Nitro Pro is a U.S. company Nitro PDF production and management software. A security vulnerability exists in Nitro Pro 11.0.3 and earlier versions. A remote attacker could exploit this vulnerability with a specially crafted PCX file to cause a denial of service...

Code injection

Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service application crash via a crafted PCX file...

CVE-2017-7950

Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service application crash via a crafted PCX file...

CVE-2017-7950

Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service application crash via a crafted PCX file...

CVE-2017-7950

CVE-2017-7950 affects Nitro Pro 11.0.3 and earlier. A crafted PCX file can cause an application crash (DoS) when Nitro Pro processes the file. Multiple sources (NVD/NV exploits) corroborate the DoS vector; some OpenVAS entries note related vulnerabilities in Nitro Pro. The public documents do not...

CVE-2017-7950

Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service application crash via a crafted PCX file...

Nitro Pro 11 PDF Handling Code Execution Vulnerability

Summary An out of bound write vulnerability exists in the PDF parsing functionality of Nitro Pro 11.0.4.159. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability. Tested...

Nitro Pro Remote Code Execution Vulnerability

Nitro Pro is a U.S. company Nitro PDF production and management software. A remote code execution vulnerability exists in the PDF parsing feature of Nitro Pro 10. An attacker could exploit the vulnerability to send a specific PDF file to the victim, leading to potential code execution...

Nitro Pro Memory Corruption Vulnerability

Nitro Pro is a U.S. company Nitro PDF production and management software. A memory corruption vulnerability exists in the PDF parsing feature of Nitro Pro version 10.5.9.9. An attacker can exploit the vulnerability to send a specific PDF file to the victim, resulting in memory corruption...

CVE-2016-8709

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability...

CVE-2016-8713

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this...

CVE-2016-8709

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability...