CVE-2016-8711
HighSummary
A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential code execution.
Risk Assessment
An attacker can send the victim a specific PDF file to trigger this vulnerability, which may lead to remote code execution on the victim's system. This could result in system takeover or data theft.
Recommendation
It is recommended to update Nitro Pro to the latest version to mitigate this vulnerability. Additionally, avoid opening PDF files from unknown sources.
Other vulnerabilities in Nitro Pro 10
See all- CVE-2017-7442High
Nitro Pro version 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.
- CVE-2016-8713High
A remote out of bound write / memory corruption vulnerability exists in Nitro Pro 10.5.9.9's PDF parsing functionality. A specially crafted PDF file can trigger this vulnerability.
- CVE-2016-8709High
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption.
Original NVD description (English source)
A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential code execution. An attacker can send the victim a specific PDF file to trigger this vulnerability.