CVE-2020-6074

Name of the Vulnerable Software and Affected Versions Nitro Pro version 13.9.1.155

Description The issue is related to a use-after-free error in the PDF parser of Nitro Pro, which can be exploited by a remote attacker using a specially crafted PDF file to execute arbitrary code.

Recommendations For Nitro Pro version 13.9.1.155, update to a newer version that contains a fix for this issue to prevent exploitation. As a temporary workaround, consider avoiding the use of the PDF parser until a patch is available. Restrict access to untrusted PDF files to minimize the risk of exploitation.