CVE-2020-10222

概要

参考情報

• nafiez/nafiez.github.io · Exploit
• nafiez.github.io/security/vulnerability/corruption/fuzzing/2020/03/05/fuzzing-heap-corruption-nitro-pdf-vulnerability.html · Exploit

nitro pro のその他の脆弱性

• CVE-2021-21797高 7.8An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a …
• CVE-2021-21796高 7.8An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause…
• CVE-2021-21798高 7.8An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted …
• CVE-2018-18689中 5.3The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signat…
• CVE-2018-18688中 5.3The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signat…