Detections
Analytics

Nitro Pro Insecure Library Loading

medium Nessus Plugin ID 66026

Language:

Synopsis

The remote host has a PDF toolkit installed that is affected by an insecure library loading vulnerability.

Description

The version of Nitro Pro installed on the remote Windows host is earlier than 8.5.2.10 and is, therefore, reportedly affected by an insecure library loading vulnerability. By tricking a user into opening a specially crafted file, an attacker could execute arbitrary code on the remote host subject to the privileges of the user running the affected application.

Solution

Upgrade to Nitro Pro 8.5.2.10 or later.

See Also

https://seclists.org/fulldisclosure/2013/Apr/60

Plugin Details

Severity: Medium

ID: 66026

File Name: nitro_pro_8_5_2_10.nasl

Version: 1.5

Type: local

Agent: windows

Family: Windows

Published: 4/18/2013

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 6.9

Temporal Score: 5.1

Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:nitro:nitro_pdf

Required KB Items: SMB/Nitro Pro/installed

Exploit Ease: No known exploits are available

Patch Publication Date: 3/28/2013

Vulnerability Publication Date: 4/8/2013

Reference Information

CVE: CVE-2013-2773

BID: 58928