CVE-2024-35288
High
Description
Nitro PDF Pro before 13.70.8.82 and 14.x before 14.26.1.0 allows Local Privilege Escalation in the MSI Installer because custom actions occur unsafely in repair mode. CertUtil is run in a conhost.exe window, and there is a mechanism allowing CTRL+o to launch cmd.exe as NT AUTHORITY\SYSTEM.
SeverityHigh
CVSS7.8
Exploit probability—
ProductGonitro Nitro Pdf Pro
PublishedOct 9, 2024
First seenOct 9, 2024
How to fix
Update
- gonitro nitro_pdf_pro13.70.8.82, 14.26.1.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gonitro nitro_pdf_pro | v < 13.70.8.82, 14.0 ≤ v < 14.26.1.0 | 13.70.8.82, 14.26.1.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.