789 matches found
PT-2020-11981
Name of the Vulnerable Software and Affected Versions Nitro Pro versions prior to 13.13.2.242 Description The issue is related to a heap corruption problem in the JBIG2Decode CNxJBIG2DecodeStream function, which can be triggered by a crafted PDF document. This corruption occurs at the create popu...
PT-2020-11980
Name of the Vulnerable Software and Affected Versions Nitro Pro versions prior to 13.13.2.242 Description The issue is related to a Heap Corruption problem that can be triggered by a crafted PDF document. This corruption occurs at the npdf!nitro::get property+2381 location within the npdf.dll...
CVE-2020-10223: Out-of-bounds Write
npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::createpopupformarkup+0x12fbe via a crafted PDF document...
CVE-2020-10222: Undefined Security Weakness
npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::getproperty+2381 via a crafted PDF document...
@nitro/app (>=4.14.2, <=5.2.0), @omneedia/template (>=1.0.0, <=1.0.10) +3 more potentially affected by CVE-2019-10793 via dot-object (>=2.0.0, <=2.1.2)
dot-object NPM version =2.0.0, =4.14.2, =1.0.0, =1.0.0, =1.4.8, =1.5.11 Source cves: CVE-2019-10793 Source advisory: SNYK:JS-DOTOBJECT-548905...
PT-2020-2731
Name of the Vulnerable Software and Affected Versions Nitro Pro version 13.9.1.155 Description The issue is related to a use-after-free error in the PDF parser of Nitro Pro, which can be exploited by a remote attacker using a specially crafted PDF file to execute arbitrary code. Recommendations F...
PT-2020-2732
Name of the Vulnerable Software and Affected Versions Nitro Pro version 13.9.1.155 Description The issue is related to the parsing of Pattern objects in Nitro Pro, which can be exploited through a specially crafted PDF file. This exploitation can trigger an integer overflow, potentially leading t...
CVE-2013-2773
Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution...
Design/Logic Flaw
Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution...
CVE-2013-2773
Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution...
CVE-2013-2773
Nitro Pro / Nitro PDF Toolkit vulnerability CVE-2013-2773 is documented with concrete details: Nitro Pro 8.5.0.26 and older are affected by an insecure library loading (DLL hijacking) issue. The root cause is insecure DLL loading, enabling arbitrary code execution when a user opens a specially cr...
CVE-2013-2773: Untrusted Search Path
Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution...
PT-2020-7422
Name of the Vulnerable Software and Affected Versions: Nitro PDF version 8.5.0.26 Description: A specially crafted DLL file can facilitate Arbitrary Code Execution. Recommendations: For Nitro PDF version 8.5.0.26, at the moment, there is no information about a newer version that contains a fix fo...
CVE-2019-19817
The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x2e8a Out-of-Bounds Read via crafted Unicode content...
CVE-2019-19819
The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer Dereference via crafted Unicode content...
CVE-2019-19817
The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x2e8a Out-of-Bounds Read via crafted Unicode content...
CVE-2019-19819
The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer Dereference via crafted Unicode content...
Out-of-bounds
The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x2e8a Out-of-Bounds Read via crafted Unicode content...
Null pointer dereference
The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer Dereference via crafted Unicode content...