CVE-2019-5047
High
Description
An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability.
SeverityHigh
CVSS7.8
Exploit probability—
ProductGonitro Nitropdf
PublishedOct 9, 2019
First seenOct 9, 2019
Weakness typeCWE-416Use after free
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gonitro nitropdf | 12.2.1.522 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.