Skip to content
OpenAdvisories
Medium · 6.5 CVE-2020-6093 EUVD-2020-27247GHSA-cc9g-8gq4-65mp

An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling. A specially crafted PDF…

Published May 18, 2020 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling. A specially crafted PDF document can cause uninitialized memory access resulting in information disclosure. In order to trigger this vulnerability, victim must open a malicious file.

Affected products

VendorProductAffectedFixed
— Nitro Pro Nitro Pro 13.9.1.155 —

References