669 matches found
CVE-2019-19819
The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer Dereference via crafted Unicode content...
CVE-2019-19818
The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0xa08a Out-of-Bounds Read via crafted Unicode content...
CVE-2019-19818
The CVE-2019-19818 entry concerns Nitro Free PDF Reader 12.0.0.112, specifically the JBIG2Decode library in npdf.dll. The vulnerability is an Out-of-Bounds Read in CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0xa08a triggered by crafted Unicode content. Affected component: JBIG2Decode in np...
Nitro Software Nitro Pro Input Validation Error Vulnerability
Nitro Software Nitro Pro is a U.S. Nitro Software PDF document editor software. The software supports PDF document editing, PDF document formatting and encryption of PDF documents and other functions. An input validation error vulnerability exists in Nitro Software Nitro Pro versions prior to 13....
CVE-2019-18958
Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation on the JPEG output of a scanner. Reportedly, this can have a security risk if debug.log is later edited and then executed...
CVE-2019-18958
Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation on the JPEG output of a scanner. Reportedly, this can have a security risk if debug.log is later edited and then executed...
Design/Logic Flaw
Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation on the JPEG output of a scanner. Reportedly, this can have a security risk if debug.log is later edited and then executed...
CVE-2019-18958
Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation on the JPEG output of a scanner. Reportedly, this can have a security risk if debug.log is later edited and then executed...
CVE-2019-18958
Nitro Pro before 13.2 is affected. The issue arises when a PDF is produced by OCR on the JPEG output of a scanner, causing Nitro Pro to write a debug.log in the same directory as the PDF. Reportedly, if this debug.log is later edited and then executed, it can pose a security risk. Connected docum...
CVE-2019-18958
Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation on the JPEG output of a scanner. Reportedly, this can have a security risk if debug.log is later edited and then executed...
Nitro Software NitroPDF Remote Code Execution Vulnerability
Nitro Software NitroPDF is a software for viewing and editing PDF files from Nitro Software, USA. A remote code execution vulnerability exists in Nitro Software NitroPDF version 12.12.1.522, which can be exploited to execute arbitrary code with the help of specially crafted PDF files...
Nitro Software NitroPDF Resource Management Error Vulnerability (CNVD-2019-34907)
Nitro Software NitroPDF is a software for viewing and editing PDF files from Nitro Software, USA. A resource management error vulnerability exists in Nitro Software NitroPDF. An attacker can exploit this vulnerability to achieve remote code execution via specially crafted PDFs...
CVE-2019-5048
A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file...
CVE-2019-5045
A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the...
CVE-2019-5050
A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file...
CVE-2019-5053
An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a use-after-free condition. An attacker can craft a malicious PDF to trigger this vulnerability...
CVE-2019-5047
An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability...
NitroPDF jpeg2000 ssizDepth Remote Code Execution Vulnerability
Summary A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open...
SDWAN: NITRO API command to export configuration
How to export SDWAN configuration through NITRO API ? Please use the below command to export SDWAN configuration through NITRO API: NOTE: The configuration export NITRO API command is available only from 10.2 build. First login to SDWAN device through NITRO API using below command .Then Export th...
apex-frontend-boost (>=3.1.0 <=3.1.4), apex-nitro (>=4.0.0 <=4.0.0-beta.5) potentially affected by CVE-2018-16462 via apex-publish-static-files (=1.0.8)
apex-publish-static-files NPM version =1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on apex-publish-static-files and may be impacted: - apex-frontend-boost =3.1.0, =4.0.0, =4.0.0-beta.5 Source cves: CVE-2018-16462 Source advisory:...