Security Advisory

CVE-2020-6093

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-05-18 16:17:14
Last updated 2024-08-04 08:47:41
Assigner talos
State PUBLISHED

Description

An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling. A specially crafted PDF document can cause uninitialized memory access resulting in information disclosure. In order to trigger this vulnerability, victim must open a malicious file.