Description (CNA)
Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.tracker-software.com/company/news_press_events/view/179
- https://herolab.usd.de/wp-content/uploads/sites/4/2018/07/usd20180019.txt
ADP enrichment
No English description supplied.