CVE-2020-6112: 
Nitro Pro vulnerability analysis and mitigation

An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.'s Nitro Pro 13.13.2.242 when decoding sub-samples. While initializing tiles with sub-sample data, the application can miscalculate a pointer for the stripes in the tile which allows for the decoder to write out-of-bounds and cause memory corruption. This vulnerability was discovered and reported in September 2020 (Talos Blog).

The vulnerability is tracked as CVE-2020-6112 and has received a CVSS v3.1 base score of 7.8 HIGH (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) from NVD, while Talos assigned it a CVSS v3.0 score of 8.8 HIGH (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerability is classified as CWE-823 (Use of Out-of-range Pointer Offset). The issue occurs during the initialization of tiles with sub-sample data, where the application miscalculates a pointer for the stripes in the tile (NVD).

The vulnerability can result in code execution on the affected system. An attacker can trigger this vulnerability by embedding a specially crafted image inside a PDF document and having a victim load it (Talos Blog).

The vulnerability requires user interaction to load a specially crafted PDF document containing a malicious JPEG2000 image. The attack can be executed remotely, with low attack complexity and no privileges required (NVD).

The vulnerability affects Nitro Pro versions 13.13.2.242 and 13.16.2.300. Users should update to a patched version of the software as recommended by Nitro Software (Talos Blog).