CVE-2016-8713
HighSummary
A remote out of bound write / memory corruption vulnerability exists in Nitro Pro 10.5.9.9's PDF parsing functionality. A specially crafted PDF file can trigger this vulnerability.
Risk Assessment
An attacker can exploit this vulnerability by sending a malicious PDF file to the victim, potentially leading to memory corruption and system compromise.
Recommendation
It is recommended to update Nitro Pro to the latest version to mitigate this vulnerability and to avoid opening PDF files from untrusted sources.
Other vulnerabilities in Nitro Pro 10.5.9.9
See all- CVE-2017-7442High
Nitro Pro version 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.
- CVE-2016-8711High
A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential code execution.
- CVE-2016-8709High
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption.
Original NVD description (English source)
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability.