CVE-2020-6115 Use after free in Nitro Pro
A use-after-free vulnerability in Nitro Pro allows attackers to execute arbitrary code via a specially crafted PDF document.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-6115?
CVE-2020-6115 is a high-severity use after free vulnerability in Nitro Pro, published on 17 Sep 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. While searching for an object identifier in a malformed document that is missing from the cross-reference table, the application will save a reference to the object’s cross-reference table entry inside a stack variable. If the referenced object identifier is not found, the application may resize the cross-reference table which can change the scope of its entry. Later when the application tries to reference cross-reference entry via the stack variable, the application will access memory belonging to the recently freed table causing a use-after-free condition. A specially crafted document can be delivered by an attacker and loaded by a victim in order to trigger this vulnerability.
Weakness: CWE-416
Which versions are affected by CVE-2020-6115?
It affects 1 product.
Products include Gonitro Nitro Pro.
How do I fix CVE-2020-6115?
No fix has been published for CVE-2020-6115 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2020-6115 being exploited?
There is no known exploitation of CVE-2020-6115 in the wild and no public exploit code.
Other vulnerabilities in Nitro Pro
Sources
Also known as GHSA-pc78-6jfc-54mv.