TI-2020-05013 CVE-2020-6146 · GHSA-vqh2-672q-h5xp
Heap-based buffer overflow in Nitro Pro
Priority HIGH 77
An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300.
Gonitro
Records35All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9
Exploited now
Gonitro records in CISA KEVNo Gonitro vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
18 records in Nitro Pro · all components
TI-2020-04980 CVE-2020-6113 · GHSA-qrv7-h49g-2qfw
Integer overflow in Nitro Pro
Priority HIGH 70
An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating its cross-reference table.
TI-2020-04941 CVE-2020-6074 · GHSA-gwj2-7fw9-8jcx
Use after free in Nitro Pro
Priority HIGH 66
An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155.
TI-2017-05094 CVE-2017-7442 · GHSA-6rfp-cx64-qrwc
Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and…
Priority HIGH 66
Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.
TI-2020-04959 CVE-2020-6092 · GHSA-w84q-5c2r-x6wg
Integer overflow in Nitro Pro
Priority MEDIUM 63
An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects.
TI-2020-04983 CVE-2020-6116 · GHSA-qc5m-fq47-qgpw
Integer overflow in Nitro Pro
Priority MEDIUM 57
An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242.
TI-2021-04843 CVE-2021-21798 · GHSA-4vm8-m2w2-wpqm
An exploitable return of stack variable address vulnerability exists in the JavaScript…
Priority MEDIUM 53
An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF.
TI-2020-04979 CVE-2020-6112 · GHSA-4r39-5xx8-q235
An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding…
Priority MEDIUM 51
An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when decoding sub-samples.
TI-2021-04842 CVE-2021-21797 · GHSA-5676-7chm-gxvm
Double free in Nitro Pro
Priority MEDIUM 50
An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF.
TI-2021-04841 CVE-2021-21796 · GHSA-xv8q-fw76-648m
Use after free in Nitro Pro
Priority MEDIUM 50
An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF.
TI-2020-08236 CVE-2020-10223 · GHSA-cw22-r4v9-jqrg
npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode…
Priority MEDIUM 40
npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::create_popup_for_markup+0x12fbe via a crafted PDF document.
TI-2020-08235 CVE-2020-10222 · GHSA-5gh8-c6m6-qm88
npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at…
Priority MEDIUM 40
npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted PDF document.
TI-2020-04982 CVE-2020-6115 · GHSA-pc78-6jfc-54mv
Use after free in Nitro Pro
Priority LOW 39
An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242.
TI-2019-13670 CVE-2019-18958 · GHSA-j395-6955-mv56
Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is…
Priority LOW 35
Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation on the JPEG output of a scanner.
TI-2020-04960 CVE-2020-6093 · GHSA-cc9g-8gq4-65mp
An exploitable information disclosure vulnerability exists in the way Nitro Pro…
Priority LOW 30
An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling.
TI-2018-13212 CVE-2018-18689 · GHSA-wmqc-jfc8-pfm5
The Portable Document Format (PDF) specification does not provide any information…
Priority LOW 30
The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures.
TI-2017-05558 CVE-2017-7950 · GHSA-9f99-jv4j-478p
Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service…
Priority LOW 30
Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted PCX file.
TI-2018-13211 CVE-2018-18688 · GHSA-q966-hp9v-pw89
The Portable Document Format (PDF) specification does not provide any information…
Priority LOW 26
The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures.