← Back to browse · API

CVE-2020-6092

Severity
HIGH
CVSS
8.8
EPSS
0.42268
Risk score
49.99
CISA KEV
No
PoC
No
Published
2020-05-18
Modified
2024-08-04
First seen
2026-08-07
Aliases
EUVD-2020-27246, GHSA-W84Q-5C2R-X6WG
Products
Nitro:Nitro Pro Nitro Pro 13.9.1.155
Sources
euvd EUVD-2020-27246

Description

An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially crafted PDF file can trigger an integer overflow that can lead to arbitrary code execution. In order to trigger this vulnerability, victim must open a malicious file.

References