PDF-XChange Viewer 'launchURL' Function Arbitrary Code Execution Vulnerability

PDF-XChange Viewer is a free multifunctional PDF reader. An arbitrary code execution vulnerability exists in the 'launchURL' function in PDF-XChange Viewer version 2.5 Build 314.0. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of a specially crafted PDF...

CVE-2017-7442

Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences...