CVE-2020-6074: Use After Free
Published May 18, 2020
·Updated
An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155. A specially crafted PDF document can cause a use-after-free which can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.
Affected Software
1 affected component
Gonitro Nitro Pro=13.9.1.155
Event History
May 18, 2020
CVE Published
via MITRE·04:13 PM
Data Sourced
via MITRE·04:13 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this code execution vulnerability?
The vulnerability ID for this code execution vulnerability is CVE-2020-6074.
2
What is the affected software?
The affected software is Nitro Pro version 13.9.1.155.
3
What is the severity of CVE-2020-6074?
The severity of CVE-2020-6074 is high, with a severity value of 8.8.
4
How can a specially crafted PDF document trigger this vulnerability?
A specially crafted PDF document can cause a use-after-free vulnerability, leading to remote code execution.
5
Is there a link for more information about this vulnerability?
Yes, you can find more information about this vulnerability at [this link](https://talosintelligence.com/vulnerability_reports/TALOS-2020-0997).