CVE-2018-6462 Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attacke...
HighCVSS 7.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tracker-software pdf-xchange viewer | < 2.5.322.8 | 2.5.322.8 |
| tracker-software viewer ax sdk | < 2.5.322.8 | 2.5.322.8 |
References
- herolab.usd.de
- www.tracker-software.com patch vendor-advisory