Multiple vulnerabilities in Nitro Pro PDF reader

[silversurfer]

Content source

https://blog.talosintelligence.com/2020/09/vuln-spotlight-nitro-pdf-sept-2020.html

Cisco Talos recently discovered multiple code execution vulnerabilities in the Nitro Pro PDF reader. Nitro PDF allows users to save, read, sign and edit PDFs on their computers. The software contains vulnerabilities that could allow adversaries to exploit a victim machine in multiple ways that would eventually allow them to execute code. [...]

VERSIONS TESTED
Talos tested and confirmed that Nitro Pro PDF, versions 13.13.2.242 and 13.16.2.300 are affected by these vulnerabilities.

Vulnerability Spotlight: Multiple vulnerabilities in Nitro Pro PDF reader

Cisco Talos researchers discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple code execution vulnerabilities in the Nitro Pro PDF reader. Nitro PDF allows users to save, read, sign and edit PDFs on their computers. The software contains vulnerabilities...

blog.talosintelligence.com

 

[dinosaur07]

Strange and surprisingly given the fact that the exploits are somehow common. This software is hell expensive and still has these issues!