PT-2019-17434 · Nitro · Nitropdf

Aleksandar Nikolic · Publicado 2019-10-09 · Atualizado 2022-06-27 · CVE-2019-5048

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NitroPDF version 12.12.1.522

Description A specially crafted PDF file can cause a heap corruption when opened, potentially leading to arbitrary code execution with careful memory manipulation. The issue can be triggered when the victim opens the malicious file.

Recommendations For NitroPDF version 12.12.1.522, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-122

Identificadores relacionados

CVE-2019-5048

Produtos afetados

Nitropdf

Referências · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0817 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-5048 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5048 · Aviso do Fabricante