Nitro Pro and Nitro Reader CVE-2013-3552 Remote Memory Corruption Vulnerability

Bugtraq ID:	60180
Class:	Unknown
CVE:	CVE-2013-3552
Remote:	Yes
Local:	No
Published:	May 21 2013 12:00AM
Updated:	Mar 19 2015 09:29AM
Credit:	Jeremy Brown of Microsoft and Nitro PDF
Vulnerable:
Not Vulnerable:

Nitro Pro and Nitro Reader CVE-2013-3552 Remote Memory Corruption Vulnerability

Nitro Pro and Nitro Reader are prone to a remote memory-corruption vulnerability.

Attackers can exploit this issue to execute arbitrary code within the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions.

The following products and versions are vulnerable:

Nitro Pro 7.5.0.29 and prior
Nitro Reader 2.5.0.45 and prior

Nitro Pro and Nitro Reader CVE-2013-3552 Remote Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Nitro Pro and Nitro Reader CVE-2013-3552 Remote Memory Corruption Vulnerability

References:

• Nitro PDF - Homepage (Nitro PDF)
  
• Memory Corruption in Nitro Reader Could Allow Arbitrary Code Execution (Microsoft)