CVE-2019-17497 | BDVDB-2026-124243 Detail

Description#

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a related issue to CVE-2018-4993). For example, an NTLM hash is sent for a link to \\192.168.0.2\C$\file.pdf without user interaction.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/ponypot/cve/raw/master/pdfXChangeEditor_FDFInclusions.pdf

Exploit#

No public exploit known

History#

Version 12019-10-10Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.