CVE-2019-17497

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a related issue to CVE-2018-4993)

published October 10, 2019

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a related issue to CVE-2018-4993). For example, an NTLM hash is sent for a link to \\192.168.0.2\C$\file.pdf without user interaction.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06291 · 93.6th percentile
Published
2019-10-10T23:52Z
EPSS history
Timeline
  • 10 OCT 23:52Z
    Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a related issue to CVE-2018-4993)
    cvelistv5