Nitro pdf memory leak

Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode. Please rate your experience Yes No. Any additional feedback?

Not only have cybercriminals been able to access sensitive account information of millions of users, but also information related to shared documents. Almost all Fortune organizations are affected by this privacy violation. Cyble told BleepingComputer that an attacker was suspected of being able to pull data from the Nitro system. Bleeping Computer was able to verify data from the stolen user database by checking known email addresses of nitro accounts that were present in the database.

The document database contains the title of the files, whether they were created and signed, which account each document belongs to, and whether it is public. The following table, compiled by Cyble, contains an overview of affected companies:. Nitro has remained silent on the incident and has not responded to inquiries. How the hackers got their hands on the data is currently unknown. Bleeping Computer has published details here and in some tweets.

Your email address will not be published. Born's Tech and Windows World. Skip to content. The Australian company behind the popular PDF software Nitro PDF has suffered a data breach that may have impacted several other well-known organizations.

However, the company also offers a cloud service that can be used by customers to share documents with coworkers as well as with employees at other organizations. There is no evidence currently that any sensitive or financial data relating to customers has been impacted or that any information has been misused.

Nitro has elevated its monitoring and security protocols and has not identified any further malicious activity connected to the incident. According to Cyble, the user credential database table contains 70m user records which contain the email addresses, full names, bcrypt hashed passwords, titles, company names, IP addresses and other system data from Nitro Software's customers. For instance, the database reportedly contains 17, documents from Amazon, 6, from Apple, , from Citi, 32, from Google and 2, from Microsoft.

Users are required to provide an email address — converted files are delivered to the email address provided — and common email domains are frequently entered and will show up in these logs.