CVE-2016-8709
HighSummary
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption.
Risk Assessment
An attacker can send the victim a specific PDF file to trigger this vulnerability, potentially leading to memory corruption and system compromise.
Recommendation
It is recommended to update Nitro Pro 10 to the latest version to mitigate this vulnerability and to avoid opening PDF files from untrusted sources.
Other vulnerabilities in Nitro Pro 10
See all- CVE-2017-7442High
Nitro Pro version 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.
- CVE-2016-8713High
A remote out of bound write / memory corruption vulnerability exists in Nitro Pro 10.5.9.9's PDF parsing functionality. A specially crafted PDF file can trigger this vulnerability.
- CVE-2016-8711High
A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential code execution.
Original NVD description (English source)
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability.