PT-2019-17432 · Nitro · Nitropdf

Aleksandar Nikolic · Publicado 2019-10-09 · Atualizado 2022-06-27 · CVE-2019-5046

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NitroPDF version 12.12.1.522

Description A specially crafted jpeg2000 file embedded in a PDF can cause heap corruption when opened in the affected software, potentially leading to arbitrary code execution if the memory is carefully manipulated. The victim must open the malicious file to trigger this issue.

Recommendations For NitroPDF version 12.12.1.522, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-122

Identificadores relacionados

CVE-2019-5046

Produtos afetados

Nitropdf

Referências · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0815 · Exploit
• https://osv.dev/vulnerability/CVE-2019-5046 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5046 · Nota de Segurança