Nitro Pro Heap Memory Corruption Vulnerability

Nitro Pro is a desktop product with full PDF creation and editing capabilities. A JBIG2Decode CNxJBIG2DecodeStream heap memory corruption vulnerability exists in npdf.dll in versions prior to Nitro Pro 13.13.2.242. An attacker can exploit this vulnerability via a specially crafted PDF document to...

CVE-2019-19819

The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer Dereference via crafted Unicode content...

Null pointer dereference

The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer Dereference via crafted Unicode content...

PT-2019-15970

Name of the Vulnerable Software and Affected Versions Nitro Free PDF Reader version 12.0.0.112 Description The issue is related to a NULL Pointer Dereference in the JBIG2Globals library within npdf.dll. This occurs via crafted Unicode content, specifically through the...

PT-2019-15969

Name of the Vulnerable Software and Affected Versions Nitro Free PDF Reader version 12.0.0.112 Description The issue is related to an Out-of-Bounds Read in the JBIG2Decode library within npdf.dll. This occurs via crafted Unicode content, specifically affecting the...

PT-2019-15968

Name of the Vulnerable Software and Affected Versions Nitro Free PDF Reader version 12.0.0.112 Description The issue is related to an Out-of-Bounds Read in the JBIG2Decode library within npdf.dll. This occurs via crafted Unicode content, specifically through the...