Exploitation Summary
EIP tracks 1 public exploit for CVE-2017-2796. PoCs published by SecuriTeam.
AI-analyzed exploit summary The provided code includes a functional proof-of-concept exploit for CVE-2017-2796, targeting Nitro PDF Pro. It demonstrates a directory traversal vulnerability via the `Doc.saveAs` function and a command execution vulnerability via the `App.launchURL` function, both of which can lead to remote code execution.
Description
Nitro Pro PDF - Multiple Vulnerabilities
Exploits (1)
The provided code includes a functional proof-of-concept exploit for CVE-2017-2796, targeting Nitro PDF Pro. It demonstrates a directory traversal vulnerability via the `Doc.saveAs` function and a command execution vulnerability via the `App.launchURL` function, both of which can lead to remote code execution.