Nitro Pro Insecure Library Loading

Medium Nessus Plugin ID 66026


The remote host has a PDF toolkit installed that is affected by an insecure library loading vulnerability.


The version of Nitro Pro installed on the remote Windows host is earlier than and is, therefore, reportedly affected by an insecure library loading vulnerability. By tricking a user into opening a specially crafted file, an attacker could execute arbitrary code on the remote host subject to the privileges of the user running the affected application.


Upgrade to Nitro Pro or later.

See Also

Plugin Details

Severity: Medium

ID: 66026

File Name: nitro_pro_8_5_2_10.nasl

Version: $Revision: 1.3 $

Type: local

Agent: windows

Family: Windows

Published: 2013/04/18

Modified: 2016/10/27

Dependencies: 66025

Risk Information

Risk Factor: Medium


Base Score: 6.9

Temporal Score: 6

Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:ND/RL:OF/RC:ND

Vulnerability Information

CPE: cpe:/a:nitro:nitro_pdf

Required KB Items: SMB/Nitro Pro/installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2013/03/28

Vulnerability Publication Date: 2013/04/08

Reference Information

CVE: CVE-2013-2773

BID: 58928

OSVDB: 92118