CVE-2017-14971

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker delivers a crafted Microsoft Office document containing a link with a UNC pathname pointing to an attacker‑controlled server; in a described scenario, an Excel spreadsheet is used and the attacker‑...