CVE-2018-6462

Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead…

published January 31, 2018

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02464 · 84.3th percentile
Published
2018-01-31T18:00Z
EPSS history
Timeline
  • 31 JAN 18:00Z
    Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead…
    cvelistv5