Intrusion PreventionNitro.Pro.PDF.Indexed.ColorSpace.Integer.Overflow
Description
This indicates an attack attempt to exploit an Integer Overflow Vulnerability in Nitro PDF Nitro Pro.
The vulnerability occurs while processing an Indexed ColorSpace from a PDF document. A remote attacker could exploit this vulnerability by enticing a user to open a crafted PDF document. Successful exploitation of this vulnerability would result in memory corruption and can be leveraged to perform remote code execution under the security context of the application.
Affected Products
Nitro PDF Nitro Pro 13.22.0.414 and earlier
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.gonitro.com/nps/security/updates
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 49562 |
| Created | Oct 27, 2020 |
| Updated | Nov 13, 2020 |
| Risk |
|
| CVE ID | CVE-2020-6116 |
| Exploit Prediction Score | 5.61% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |