Read the docs

Gonitro

Records35All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9

Exploited now

Gonitro records in CISA KEV

No Gonitro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nitro Pro 18 records HIGH Nitropdf 8 records LOW Nitro Pdf Pro 7 records LOW Nitro Free Pdf Reader 2 records LOW Nitro Reader 2 records LOW

Records

8 records in Nitropdf · all components

TI-2019-03512 CVE-2019-5050 · GHSA-hf44-fvq2-mqp7

Heap-based buffer overflow in NitroPDF

Priority LOW 39

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02562 Published 2019-10-09 No fix listed CWE-122
TI-2019-03510 CVE-2019-5048 · GHSA-vp6p-93mp-pf7g

Heap-based buffer overflow in NitroPDF

Priority LOW 38

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02282 Published 2019-10-09 No fix listed CWE-122
TI-2019-03508 CVE-2019-5046 · GHSA-cvc6-xw8j-m5h3

Heap-based buffer overflow in NitroPDF

Priority LOW 38

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02282 Published 2019-10-09 No fix listed CWE-122
TI-2019-03507 CVE-2019-5045 · GHSA-r3cx-rwrg-h4g5

Heap-based buffer overflow in NitroPDF

Priority LOW 38

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02282 Published 2019-10-09 No fix listed CWE-122
TI-2019-03515 CVE-2019-5053 · GHSA-c4r3-cm4j-7qqm

Use after free in NitroPDF

Priority LOW 37

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01331 Published 2019-10-09 No fix listed CWE-416
TI-2019-03509 CVE-2019-5047 · GHSA-4386-ccwc-33g5

Use after free in NitroPDF

Priority LOW 37

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01331 Published 2019-10-09 No fix listed CWE-416
Open these records in search →