This video shows the difference, in terms of security, between opening a file inside a browser and opening the same file (by exploiting an IE7 vulnerability) in an external application. In this example, I use a proof-of-concept PDF file that was made by pdp from GNUCitizen (http://www.gnucitizen.org), and exploit a vulnerability to open Windows calculator.
thats because you went to something like
website . com/file.pdf
RyanzMyst1c 4 years ago