2025-08-27 10:23:38
CERT-PL
PUBLISHED
In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system() call in the ConvertToPDF function.