CVE-2018-6462 | BDVDB-2026-95916 Detail

Description#

Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.tracker-software.com/company/news_press_events/view/179
https://herolab.usd.de/wp-content/uploads/sites/4/2018/07/usd20180019.txt

Exploit#

No public exploit known

History#

Version 12018-01-31Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.