Code injection

2018-01-3118:29:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

JSON

Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document.

CPENameOperatorVersion
pdf-xchange_viewerlt2.5.322.8
viewer_ax_sdklt2.5.322.8

CPE	Name	Operator	Version
	pdf-xchange_viewer	lt	2.5.322.8
	viewer_ax_sdk	lt	2.5.322.8

References

herolab.usd.de/wp-content/uploads/sites/4/2018/07/usd20180019.txt

www.tracker-software.com/company/news_press_events/view/179