CVE-2019-5046

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the...

NitroPDF Code Execution Vulnerability (CNVD-2019-34905)

Nitro Software NitroPDF is a software for viewing and editing PDF files from Nitro Software, USA. A code execution vulnerability exists in NitroPDF. An attacker can exploit this vulnerability to execute arbitrary code with the help of a malicious file...