Skip to content
OpenAdvisories
High · 8.8 CVE-2020-6092 EUVD-2020-27246GHSA-w84q-5c2r-x6wg

An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially crafted PDF file can…

Published May 18, 2020 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially crafted PDF file can trigger an integer overflow that can lead to arbitrary code execution. In order to trigger this vulnerability, victim must open a malicious file.

Affected products

VendorProductAffectedFixed
— Nitro Pro Nitro Pro 13.9.1.155 —

References