Nitro PDF Pro NULL Pointer Dereference Vulnerability in JavaScript app.alert() Function

A NULL pointer dereference vulnerability has been identified in Nitro PDF Pro for Windows, version 14.41.1.4. The issue arises in the JavaScript implementation of the app.alert() function. When app.alert() is invoked with multiple arguments, and the first argument is null (such as when app.activeDocs is null), the JavaScript engine redirects the call through a fallback intended for non-string arguments. This fallback invokes js_ValueToString() on the null value, which returns an invalid string pointer. This pointer is then passed to JS_GetStringChars() without proper validation, leading to a dereferencing of the pointer that causes an access violation and crashes the application. The vulnerability can be exploited by opening a specially crafted PDF that triggers this behavior.

Impact

Exploitation of this vulnerability causes an access violation, leading to a crash of the Nitro PDF Pro application.