漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be stored in two different places. When closed, the document will result in the reference being released twice. This can lead to code execution under the context of the application. An attacker can convince a user to open a document to trigger this vulnerability.
CVSS Information
N/A
Vulnerability Type
双重释放
Vulnerability Title
Nitro Software Nitro Pro 资源管理错误漏洞
Vulnerability Description
Nitro Software Nitro Pro是美国Nitro Software公司的一款PDF文档编辑器软件。该软件支持PDF文档编辑、PDF文档格式转换和PDF文档加密等功能。 Nitro Pro PDF 存在资源管理错误漏洞,该漏洞源于产品未能正确控制文档的资源。攻击者可通过该漏洞利用特殊文件导致对超时对象的多次释放进而引发代码执行。
CVSS Information
N/A
Vulnerability Type
N/A