PT-2019-17434 · Nitro · Nitropdf

Aleksandar Nikolic · Published 2019-10-09 · Updated 2022-06-27 · CVE-2019-5048

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NitroPDF version 12.12.1.522

Description A specially crafted PDF file can cause a heap corruption when opened, potentially leading to arbitrary code execution with careful memory manipulation. The issue can be triggered when the victim opens the malicious file.

Recommendations For NitroPDF version 12.12.1.522, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

CVE-2019-5048

Affected Products

Nitropdf

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0817 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-5048 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5048 · Vendor Advisory