PatchTheCVEnitro pro vulnerabilities and fixes
Recent CVEs affecting nitro pro, with upgrade or downgrade steps. 20 tracked.
Also searched as: nitropro.
nitro pro has 20 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2021-10-18. Highest priority: CVE-2020-6146 (score 61/100).
- CVE-2021-21798 HIGH 7.8 DOWNGRADE An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro
- CVE-2021-21797 HIGH 7.8 DOWNGRADE An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF
- CVE-2021-21796 HIGH 7.8 DOWNGRADE An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF
- CVE-2020-6146 HIGH 8.8 DOWNGRADE An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and
- CVE-2020-6116 HIGH 7.8 DOWNGRADE An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitr
- CVE-2020-6115 HIGH 7.8 DOWNGRADE An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, In
- CVE-2020-6113 HIGH 7.8 DOWNGRADE An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro
- CVE-2020-6112 HIGH 7.8 DOWNGRADE An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Soft
- CVE-2020-6093 MEDIUM 5.5 DOWNGRADE An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error hand
- CVE-2020-6092 HIGH 7.8 DOWNGRADE An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects
- CVE-2020-6074 HIGH 8.8 DOWNGRADE An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155
- CVE-2020-10223 HIGH 8.1 UPGRADE npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at
- CVE-2020-10222 HIGH 8.1 UPGRADE npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via
- CVE-2019-18958 HIGH 7.8 UPGRADE Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf docu
- CVE-2018-18689 MEDIUM 5.3 DOWNGRADE DOWNGRADE The Portable Document Format (PDF) specification does not provide any information regarding the concrete proce
- CVE-2018-18688 MEDIUM 5.3 DOWNGRADE DOWNGRADE The Portable Document Format (PDF) specification does not provide any information regarding the concrete proce
- CVE-2017-7950 MEDIUM 5.5 UPGRADE Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service (application crash) via a cr
- CVE-2017-7442 HIGH 8.8 DOWNGRADE Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with dir
- CVE-2013-3553 HIGH 7.8 UPGRADE UPGRADE Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier allow remote attackers to execute arbitra
- CVE-2013-3552 HIGH 7.8 UPGRADE UPGRADE Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitra
FAQ
How do I fix nitro pro vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nitro pro being exploited right now?
None of the tracked nitro pro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nitro pro CVE should I patch first?
CVE-2020-6146 currently ranks highest (61/100): An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and.