CVE-2017-7442
HighSummary
Nitro Pro version 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.
Risk Assessment
Attackers can exploit this vulnerability to remotely execute malicious code, potentially compromising the organization's systems.
Recommendation
It is recommended to update Nitro Pro to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in Nitro Pro 11.0.3.173
See all- CVE-2016-8713High
A remote out of bound write / memory corruption vulnerability exists in Nitro Pro 10.5.9.9's PDF parsing functionality. A specially crafted PDF file can trigger this vulnerability.
- CVE-2016-8711High
A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential code execution.
- CVE-2016-8709High
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption.
Original NVD description (English source)
Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.