Lucene search
Vulnerability Spotlight: Multiple remote code execution bugs in NitroPDF
🗓️ 09 Oct 2019 07:50:30Reported by [email protected] (Jon Munshaw)Type 
talosblog🔗 feedproxy.google.com👁 84 Views
Multiple remote code execution vulnerabilities in NitroPDF Pro version. Vulnerabilities include jpeg2000 ssizDepth, Page Kids, ICCBased color space, CharProcs, and jpeg2000 yTsiz. Exploiting these vulnerabilities allows an attacker to execute arbitrary code by tricking a user into opening a malicious PDF file. Cisco Talos discovered these vulnerabilities and disclosed them due to NitroPDF's failure to provide a patch within the 90-day deadline.
| Reporter | Title | Published | Views | Family All 36 |
|---|---|---|---|---|
 | CVE-2019-5047 | 9 Oct 201920:40 | – | cvelist |
| CVE-2019-5046 | 9 Oct 201920:55 | – | cvelist |
| CVE-2019-5053 | 9 Oct 201920:40 | – | cvelist |
| CVE-2019-5050 | 9 Oct 201920:55 | – | cvelist |
| CVE-2019-5048 | 9 Oct 201920:55 | – | cvelist |
| CVE-2019-5045 | 9 Oct 201920:40 | – | cvelist |
 | Design/Logic Flaw | 9 Oct 201921:15 | – | prion |
| Design/Logic Flaw | 9 Oct 201921:15 | – | prion |
| Type confusion | 9 Oct 201921:15 | – | prion |
| Type confusion | 9 Oct 201921:15 | – | prion |
10
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo09 Oct 2019 07:30Current
1.2Low risk
Vulners AI Score1.2
EPSS0.00103