CVE-2019-17497
11.10.2019, 00:15
Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a related issue to CVE-2018-4993). For example, an NTLM hash is sent for a link to \\192.168.0.2\C$\file.pdf without user interaction.Enginsight
| Vendor | Product | Version |
|---|---|---|
| pdf-xchange | pdf-xchange_editor | 𝑥 < 8.0.330.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration