CVE-2018-6462
31.01.2018, 18:29
Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document.Enginsight
| Vendor | Product | Version |
|---|---|---|
| tracker-software | pdf-xchange_viewer | 𝑥 < 2.5.322.8 |
| tracker-software | viewer_ax_sdk | 𝑥 < 2.5.322.8 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration