Security Advisory

CVE-2020-6092

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-05-18 16:14:18
Last updated 2024-08-04 08:47:41
Assigner talos
State PUBLISHED

Description

An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially crafted PDF file can trigger an integer overflow that can lead to arbitrary code execution. In order to trigger this vulnerability, victim must open a malicious file.