PT-2020-2731
CVE-2020-6074
·
تاريخ النشر
2020-02-17
·
تاريخ التحديث
2022-06-03
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Nitro Pro version 13.9.1.155
Description
The issue is related to a use-after-free error in the PDF parser of Nitro Pro, which can be exploited by a remote attacker using a specially crafted PDF file to execute arbitrary code.
Recommendations
For Nitro Pro version 13.9.1.155, update to a newer version that contains a fix for this issue to prevent exploitation. As a temporary workaround, consider avoiding the use of the PDF parser until a patch is available. Restrict access to untrusted PDF files to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾