Read the docs

Gonitro

Records35All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9

Exploited now

Gonitro records in CISA KEV

No Gonitro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nitro Pro 18 records HIGH Nitropdf 8 records LOW Nitro Pdf Pro 7 records LOW Nitro Free Pdf Reader 2 records LOW Nitro Reader 2 records LOW

Records

35 records

TI-2020-05013 CVE-2020-6146 · GHSA-vqh2-672q-h5xp

Heap-based buffer overflow in Nitro Pro

Priority HIGH 77

An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.75498 Published 2020-09-16 No fix listed CWE-122
TI-2020-04980 CVE-2020-6113 · GHSA-qrv7-h49g-2qfw

Integer overflow in Nitro Pro

Priority HIGH 70

An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating its cross-reference table.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.64136 Published 2020-09-17 No fix listed CWE-190
TI-2020-04941 CVE-2020-6074 · GHSA-gwj2-7fw9-8jcx

Use after free in Nitro Pro

Priority HIGH 66

An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.41679 Published 2020-05-18 No fix listed CWE-416
TI-2020-04959 CVE-2020-6092 · GHSA-w84q-5c2r-x6wg

Integer overflow in Nitro Pro

Priority MEDIUM 63

An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.43079 Published 2020-05-18 No fix listed CWE-190
TI-2020-04983 CVE-2020-6116 · GHSA-qc5m-fq47-qgpw

Integer overflow in Nitro Pro

Priority MEDIUM 57

An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.28424 Published 2020-09-17 No fix listed CWE-680
TI-2021-04842 CVE-2021-21797 · GHSA-5676-7chm-gxvm

Double free in Nitro Pro

Priority MEDIUM 50

An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.15046 Published 2021-10-18 No fix listed CWE-415
TI-2021-04841 CVE-2021-21796 · GHSA-xv8q-fw76-648m

Use after free in Nitro Pro

Priority MEDIUM 50

An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.15777 Published 2021-10-18 No fix listed CWE-416
TI-2020-08236 CVE-2020-10223 · GHSA-cw22-r4v9-jqrg

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode…

Priority MEDIUM 40

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::create_popup_for_markup+0x12fbe via a crafted PDF document.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.02486 Published 2020-03-08 No fix listed CWE-787
TI-2020-04982 CVE-2020-6115 · GHSA-pc78-6jfc-54mv

Use after free in Nitro Pro

Priority LOW 39

An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02731 Published 2020-09-17 No fix listed CWE-416
TI-2019-03512 CVE-2019-5050 · GHSA-hf44-fvq2-mqp7

Heap-based buffer overflow in NitroPDF

Priority LOW 39

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02562 Published 2019-10-09 No fix listed CWE-122
TI-2019-03510 CVE-2019-5048 · GHSA-vp6p-93mp-pf7g

Heap-based buffer overflow in NitroPDF

Priority LOW 38

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02282 Published 2019-10-09 No fix listed CWE-122
TI-2019-03508 CVE-2019-5046 · GHSA-cvc6-xw8j-m5h3

Heap-based buffer overflow in NitroPDF

Priority LOW 38

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02282 Published 2019-10-09 No fix listed CWE-122
TI-2019-03507 CVE-2019-5045 · GHSA-r3cx-rwrg-h4g5

Heap-based buffer overflow in NitroPDF

Priority LOW 38

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02282 Published 2019-10-09 No fix listed CWE-122
TI-2019-03515 CVE-2019-5053 · GHSA-c4r3-cm4j-7qqm

Use after free in NitroPDF

Priority LOW 37

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01331 Published 2019-10-09 No fix listed CWE-416
TI-2019-03509 CVE-2019-5047 · GHSA-4386-ccwc-33g5

Use after free in NitroPDF

Priority LOW 37

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01331 Published 2019-10-09 No fix listed CWE-416
TI-2016-07166 CVE-2016-8709 · GHSA-mw22-w3fv-8wcc

Out-of-bounds write in Nitro Pro

Priority LOW 37

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01293 Published 2017-02-10 No fix listed CWE-787
TI-2016-07170 CVE-2016-8713 · GHSA-vf37-jh3m-72wr

Out-of-bounds write in Nitro Pro

Priority LOW 36

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01057 Published 2017-02-10 No fix listed CWE-787
Load more
Open these records in search →