Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
GonitroNitropdf

8 matches found

CVE
CVE•added 2020/01/10 6:15 p.m.•108 views

CVE-2019-19819

The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer Dereference via crafted Unicode content.

5.5CVSS5.5AI score0.00012EPSS
CVE
CVE•added 2019/10/09 9:15 p.m.•79 views

CVE-2019-5053

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a use-after-free condition. An attacker can craft a malicious PDF to trigger this vulnerability.

7.8CVSS7.5AI score0.00012EPSS
CVE
CVE•added 2019/10/09 9:15 p.m.•78 views

CVE-2019-5046

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malic...

8.8CVSS7.9AI score0.00051EPSS
CVE
CVE•added 2019/10/09 9:15 p.m.•76 views

CVE-2019-5047

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability.

7.8CVSS7.5AI score0.00012EPSS
CVE
CVE•added 2019/10/09 9:15 p.m.•74 views

CVE-2019-5045

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malic...

8.8CVSS7.9AI score0.00051EPSS
CVE
CVE•added 2019/10/09 9:15 p.m.•71 views

CVE-2019-5048

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file.

8.8CVSS7.9AI score0.00181EPSS
CVE
CVE•added 2019/10/09 9:15 p.m.•67 views

CVE-2019-5050

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file.

8.8CVSS7.9AI score0.0015EPSS
CVE
CVE•added 2020/01/14 3:15 p.m.•33 views

CVE-2013-2773

Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution

7.8CVSS7.7AI score0.00028EPSS