As I understand, any program that tries to open file with filename supplied by user (i.e. from opened document or from network request) is vulnerable to this? So it’s the same ancient NTLM issue, not vulnerability in pdf viewers?