CVE-2016-8713

CVE-2016-8713 corresponds to a memory-corruption vulnerability in Nitro Pro 10.5.9.9. Public analyses describe a remote or local memory corruption due to an out-of-bounds write in Nitro Pro’s PDF parsing path. The vulnerability centers on code in the npdf.dll module handling PDF content (e.g., op...

PT-2017-9754 · Nitro · Nitro Pro

Name of the Vulnerable Software and Affected Versions: Nitro Pro version 10 Description: A potential remote code execution issue exists in the PDF parsing functionality. A specially crafted PDF file can cause this issue, resulting in potential code execution. An attacker can send the victim a...

PT-2017-9756 · Nitro · Nitro Pro

Name of the Vulnerable Software and Affected Versions: Nitro Pro version 10.5.9.9 Description: A remote out of bound write / memory corruption issue exists in the PDF parsing functionality. A specially crafted PDF file can cause potential memory corruption. An attacker can send the victim a...

PT-2017-9752 · Nitro · Nitro Pro

Name of the Vulnerable Software and Affected Versions: Nitro Pro version 10 Description: A remote out of bound write / memory corruption issue exists in the PDF parsing functionality. A specially crafted PDF file can cause potential memory corruption. An attacker can send the victim a specific PD...

Nitro Pro 10 PDF Handling Code Execution Vulnerability

Summary A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this...

Nitro Pro 10 PDF Handling Code Execution Vulnerability

Summary A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential code execution. An attacker can send the victim a specific PDF file to trigger this vulnerability. Tested...

Nitro Pro PDF Handling Code Execution Vulnerability

Summary A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this...

Nitro Pro Handles BMP Image Memory Corruption Vulnerability

Nitro pro is a PDF production and management software. Nitro pro software has a memory corruption vulnerability in the handling of BMP images. Allowing an attacker to exploit this vulnerability by constructing malformed BMP images can cause the program to crash...

Nitro Pro 8.0.3.1 - Crash PoC

No description provided by source. !C:\Python27\python.exe Exploit Title: Nitro Pro 8.0.3.1 - DoS Date: 2012-10-07 Exploit Author: John Cobb Author Homepage: www.NoBytes.com Vendor Homepage: www.nitropdf.com Version: 8.0.3.1 Tested on: Win7 64bit CVE : None When the Object Index exceeds 10...

Nitro Pro <= 7.5.0.29 Memory Corruption

The version of Nitro Pro installed on the remote Windows host is less than or equal to 7.5.0.29 and is, therefore, reportedly affected by a memory corruption vulnerability when parsing specially crafted PDF files. C Tenable network Security, Inc. include"compat.inc"; if description scriptid66763;...

Heap Corruption in Nitro Reader Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Nitro Pro version 7.5.0.22 and earlier versions and Nitro Reader version 2.5.0.36 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated...

Nitro Pro Insecure Library Loading

The version of Nitro Pro installed on the remote Windows host is earlier than 8.5.2.10 and is, therefore, reportedly affected by an insecure library loading vulnerability. By tricking a user into opening a specially crafted file, an attacker could execute arbitrary code on the remote host subject...

Nitro Pro Installed

Nitro Pro, a PDF toolkit, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66025; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"Nitro Pro Installed";...

Nitro Pro 8 Insecure Library Loading

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Nitro Pro 8 - Insecure Library Loading Allows Remote Code Execution DLL Hijacking product: Nitro Pro vulnerable version: 8.5.0.26; older versions may also be affected fix...

Nitro Pro 8.0.3.1 - Crash PoC

Exploit for windows platform in category dos / poc !C:\Python27\python.exe Exploit Title: Nitro Pro 8.0.3.1 - DoS Date: 2012-10-07 Exploit Author: John Cobb Author Homepage: www.NoBytes.com Vendor Homepage: www.nitropdf.com Version: 8.0.3.1 Tested on: Win7 64bit CVE : None When the Object Index...

Nitro Pro 8.0.3.1 - Crash (PoC)

Nitro Pro 8.0.3.1 - Crash PoC !C:\Python27\python.exe Exploit Title: Nitro Pro 8.0.3.1 - DoS Date: 2012-10-07 Exploit Author: John Cobb Author Homepage: www.NoBytes.com Vendor Homepage: www.nitropdf.com Version: 8.0.3.1 Tested on: Win7 64bit CVE : None When the Object Index exceeds 10 characters...

Nitro Pro 8.0.3.1 - Crash (PoC)

!C:\Python27\python.exe Exploit Title: Nitro Pro 8.0.3.1 - DoS Date: 2012-10-07 Exploit Author: John Cobb Author Homepage: www.NoBytes.com Vendor Homepage: www.nitropdf.com Version: 8.0.3.1 Tested on: Win7 64bit CVE : None When the Object Index exceeds 10 characters the app crashes: !exploitable...