CVE-2017-7442

This Metasploit module exploits CVE-2017-7442 in Nitro Pro PDF Reader 11.0.3.173 by leveraging unsafe JavaScript APIs (saveAs and launchURL) to write arbitrary files and execute them, achieving remote code execution.

This Metasploit module exploits an unsafe JavaScript API in Nitro Pro PDF Reader 11.0.3.173, allowing arbitrary file writes via saveAs() and local file execution via launchURL() to achieve remote code execution.