PT-2024-26417 · Nitro · Nitro Pro Pdf

Michael Baer + 1 · Published 2024-09-30 · Updated 2025-11-17 · CVE-2024-35288

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nitro PDF Pro versions prior to 13.70.8.82 Nitro PDF Pro versions 14.x prior to 14.26.1.0

Description The issue allows Local Privilege Escalation in the MSI Installer because custom actions occur unsafely in repair mode. CertUtil is run in a conhost.exe window, and there is a mechanism allowing CTRL+o to launch cmd.exe as NT AUTHORITYSYSTEM.

Recommendations For Nitro PDF Pro versions prior to 13.70.8.82, update to version 13.70.8.82 or later. For Nitro PDF Pro versions 14.x prior to 14.26.1.0, update to version 14.26.1.0 or later. As a temporary workaround, consider restricting the use of the MSI Installer in repair mode until a patch is applied.

Fix

Related Identifiers

CVE-2024-35288

Affected Products

Nitro Pro Pdf

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2024-35288 · Security Note
• https://gonitro.com/support/downloads#securityUpdates · Note
• https://sec-consult.com/vulnerability-lab/advisory/local-privilege-escalation-via-msi-installer-in-nitro-pdf-pro · Note
• https://twitter.com/Cezar_H_Linux/status/1990494179710152884 · Twitter Post
• https://twitter.com/CVEnew/status/1843889521605390820 · Twitter Post
• http://seclists.org/fulldisclosure/2024/Sep/59 · Note
• https://t.me/cvenotify/97690 · Telegram Post
• https://twitter.com/TheNimbleNerd/status/1840953912066445690 · Twitter Post
• https://seclists.org/fulldisclosure/2024/Sep/59 · Note
• https://t.me/cvedetector/7419 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1841008588916981982 · Twitter Post