high7.8
CVE-2018-6462
Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead o…
Impact
Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tracker-Software | Pdf-Xchange Viewer | before 2.5.322.8 |
| Tracker-Software | Viewer Ax Sdk | before 2.5.322.8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://herolab.usd.de/wp-content/uploads/sites/4/2018/07/usd20180019.txt
- https://www.tracker-software.com/company/news_press_events/view/179
- https://herolab.usd.de/wp-content/uploads/sites/4/2018/07/usd20180019.txt
- https://www.tracker-software.com/company/news_press_events/view/179