EUVD-2020-2680

Malware in sbrugna...

Nitro Pro Heap Memory Corruption Vulnerability

Nitro Pro is a desktop product with full PDF creation and editing capabilities. A JBIG2Decode CNxJBIG2DecodeStream heap memory corruption vulnerability exists in npdf.dll in versions prior to Nitro Pro 13.13.2.242. An attacker can exploit this vulnerability via a specially crafted PDF document to...

CVE-2020-10223

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::createpopupformarkup+0x12fbe via a crafted PDF document...

CVE-2020-10223

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::createpopupformarkup+0x12fbe via a crafted PDF document...

CVE-2020-10222

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::getproperty+2381 via a crafted PDF document...

Design/Logic Flaw

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::createpopupformarkup+0x12fbe via a crafted PDF document...

Design/Logic Flaw

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::getproperty+2381 via a crafted PDF document...

CVE-2020-10222

Nitro Pro’s npdf.dll (versions before 13.13.2.242) is affected by a heap memory corruption vulnerability triggered by a crafted PDF, at npdf!nitro::get_property+2381. Public sources describe the issue as a heap corruption flaw in Nitro Pro’s PDF handling; CVE-2020-10222 carries a high impact with...

CVE-2020-10222

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::getproperty+2381 via a crafted PDF document...

CVE-2020-10223

Summary: CVE-2020-10223 affects Nitro Pro’s npdf.dll. The vulnerability is a JBIG2Decode CNxJBIG2DecodeStream heap corruption triggered by a crafted PDF document, impacting versions prior to Nitro Pro 13.13.2.242. The precise vulnerable component is NPDF code path npdf!CAPPDAnnotHandlerUtils::cre...

CVE-2020-10223

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::createpopupformarkup+0x12fbe via a crafted PDF document...

CVE-2019-19817

The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x2e8a Out-of-Bounds Read via crafted Unicode content...

CVE-2019-19819

The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer Dereference via crafted Unicode content...