Vulnerabilities

TI-2018-13212 CVE-2018-18689 · GHSA-wmqc-jfc8-pfm5

The Portable Document Format (PDF) specification does not provide any information…

LOW 30

The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03632 Published 2021-01-07 No fix listed CWE-347

TI-2018-04749 CVE-2018-6462 · GHSA-j7pr-8g3c-9m5r

Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from…

LOW 39

Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitr…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02464 Published 2018-01-31 No fix listed CWE-787

TI-2017-09699 CVE-2017-13056 · GHSA-hqmg-m6cw-2jmh

The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote…

MEDIUM 43

The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code via a crafted PDF file.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.05591 Published 2017-12-27 No fix listed CWE-20

TI-2013-00614 CVE-2013-0729 · GHSA-3mj2-6x39-pq7w

Heap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote…

MEDIUM 49

Heap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote attackers to execute arbitrary code via a crafted Define Huffman Table header in a JPEG image file stream in a PDF file.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06228 Published 2014-04-02 No fix listed CWE-119

TI-2012-04498 CVE-2012-5324 · GHSA-xqcm-xjf8-jp3p

Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll…

MEDIUM 49

Multiple buffer overflows in the Pdf Printer Preferences ActiveX Control in pdfxctrl.dll in Tracker Software PDF-XChange 3.60.0128 allow remote attackers to execute arbitrary code via a long string in the (1) sub_path pa…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06279 Published 2012-10-08 No fix listed CWE-119

TI-2010-04943 CVE-2010-5245 · GHSA-p49g-g7x6-w7rf

Untrusted search path vulnerability in PDF-XChange Viewer 2.0 Build 54.0 allows local…

LOW 31

Untrusted search path vulnerability in PDF-XChange Viewer 2.0 Build 54.0 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that co…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00397 Published 2012-09-07 No fix listed