Vulnerabilities > CVE-2020-10223 - Out-of-bounds Write vulnerability in Gonitro Nitro PRO

CVSS 8.1 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

gonitro

CWE-787

NVD

Published: 2020-03-08

Updated: 2020-03-09

Summary

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::create_popup_for_markup+0x12fbe via a crafted PDF document.

Vulnerable Configurations

Part	Description	Count
Application	Gonitro Gonitro Nitro PRO - Gonitro Nitro PRO 7.0.2.8 Gonitro Nitro PRO 7.2.0.15 Gonitro Nitro PRO 7.3.1.10 Gonitro Nitro PRO 7.4.1.24 Gonitro Nitro PRO 7.5.0.29 Gonitro Nitro PRO 8.0.10.9 Gonitro Nitro PRO 8.1.1.12 Gonitro Nitro PRO 8.5.7.3 Gonitro Nitro PRO 9.0.7.5 Gonitro Nitro PRO 9.5.4.22 Gonitro Nitro PRO 10.5.9.9 Gonitro Nitro PRO 11.0.0.64 Gonitro Nitro PRO 11.0.1.10 Gonitro Nitro PRO 11.0.2.110 Gonitro Nitro PRO 11.0.3 Gonitro Nitro PRO 11.0.3.134 Gonitro Nitro PRO 11.0.3.173 Gonitro Nitro PRO 11.0.5.271 Gonitro Nitro PRO 11.0.6.326 Gonitro Nitro PRO 11.0.7.411 Gonitro Nitro PRO 11.0.7.425 Gonitro Nitro PRO 11.0.8.470 Gonitro Nitro PRO 12.0.0.112 Gonitro Nitro PRO 12.1.0.195 Gonitro Nitro PRO 12.2.0.228 Gonitro Nitro PRO 12.3.0.240 Gonitro Nitro PRO 12.4.0.259 Gonitro Nitro PRO 12.5.0.268 Gonitro Nitro PRO 12.6.1.298 Gonitro Nitro PRO 12.7.0.395 Gonitro Nitro PRO 12.8.0.449 Gonitro Nitro PRO 12.9.1.474 Gonitro Nitro PRO 12.10.1.487 Gonitro Nitro PRO 12.11.0.509 Gonitro Nitro PRO 12.17.0.584 Gonitro Nitro PRO 13.1 Gonitro Nitro PRO 13.2 Gonitro Nitro PRO 13.2.6.26 Gonitro Nitro PRO 13.9.1.155	40

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References