CVE-2017-13056

HIGH

Tracker-software Pdf-xchange Viewer - Improper Input Validation

Title source: rule
STIX 2.1

Description

The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code via a crafted PDF file.

Exploits (1)

exploitdb WORKING POC
by Daniele Votta · textlocalwindows
https://www.exploit-db.com/exploits/42537

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0200
EPSS Percentile 83.7%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (1)
tracker-software/pdf-xchange_viewer 2.5
Published Dec 27, 2017
Tracked Since Feb 18, 2026