POC Files for CVE-2019-17497
CVE-2019-17497 CVE Details PDF-XChange Editor before 803300 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a related issue to CVE-2018-4993) For example, an NTLM hash is sent for a link to \attackerloca\C$\eeepdf without user interaction Original Writeup Since the original writeup didn't include the POC as files, I recreated them myself