| Package | Affected versions | Patched versions |
|---|---|---|
| pdf-xchange viewer | < 2.5.322.8 | 2.5.322.8 |
| viewer ax sdk | < 2.5.322.8 | 2.5.322.8 |
Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free