CVE-2018-18689

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations that are not detected...

CVE-2018-18688

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

CVE-2018-18689

CVE-2018-18689 describes a Signature Wrapping issue in PDF signature validation caused by missing guidance in the PDF spec, allowing attackers to manipulate /ByteRange and xref without detection. The vulnerability affects Foxit Reader before 9.4 and PhantomPDF before 8.3.9 and 9.x before 9.4, as ...

CVE-2018-18688

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

PT-2021-8829

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.4 PhantomPDF versions prior to 8.3.9 and 9.x prior to 9.4 LibreOffice affected versions not specified Master PDF Editor affected versions not specified Nitro Pro affected versions not specified Nitro Reader...

CVE-2018-18688: Improper Verification of Cryptographic Signature

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Saving vulnerability exists in multiple products. When an attacker uses the Incremental Saving feature to add pages or...

CVE-2018-18689: Improper Verification of Cryptographic Signature

The Portable Document Format PDF specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations that are not detected...

CVE-2019-19817

The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x2e8a Out-of-Bounds Read via crafted Unicode content...

Nitro Pro and Nitro Reader Arbitrary Code Execution Vulnerabilities

Nitro Pro/Nitro Reader are both products of the U.S. Nitro Pro is a PDF production and management software.Nitro Reader is a PDF solution. Nitro Pro 7.5.0.29 and earlier versions and Nitro Reader 2.5.0.45 and earlier versions of a security vulnerability. A remote attacker can exploit this...

Nitro Pro and Nitro Reader Arbitrary Code Execution Vulnerability (CNVD-2018-06312)

Nitro Pro/Nitro Reader are both products of the U.S. Nitro Pro is a PDF production and management software.Nitro Reader is a PDF solution. Nitro Pro 7.5.0.22 and earlier versions and Nitro Reader 2.5.0.36 and earlier versions of a security vulnerability. A remote attacker can exploit this...

CVE-2013-3552

Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file...

Code injection

Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file...

Code injection

Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2013-3552

Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2013-3553

CVE-2013-3553 affects Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier. The root cause is an issue in memory handling when parsing specially crafted PDF files, allowing remote code execution. Successful exploitation could grant the attacker the same user rights as the current ...

PT-2018-4093

Name of the Vulnerable Software and Affected Versions Nitro Pro versions 7.5.0.22 and earlier Nitro Reader versions 2.5.0.36 and earlier Description The issue allows remote attackers to execute arbitrary code via a crafted PDF file. Recommendations For Nitro Pro versions 7.5.0.22 and earlier,...

CVE-2013-3553: Improper Restriction of Operations within the Bounds of a Memory Buffer

Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2013-3552: Improper Restriction of Operations within the Bounds of a Memory Buffer

Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file...

PT-2018-4092

Name of the Vulnerable Software and Affected Versions Nitro Pro versions 7.5.0.29 and earlier Nitro Reader versions 2.5.0.45 and earlier Description The issue allows remote attackers to execute arbitrary code via a crafted PDF file. Recommendations For Nitro Pro versions 7.5.0.29 and earlier,...

Nitro Reader <= 2.5.0.45 Memory Corruption

The version of Nitro Reader installed on the remote Windows host is less than or equal to 2.5.0.45 and is, therefore, reportedly affected by a memory corruption vulnerability when parsing specially crafted PDF files. C Tenable network Security, Inc. include"compat.inc"; if description...