CVE-2017-13056: Tracker-Software PDF-Xchange Viewer

High severity, CVSS 7.8. EPSS: 5.6% chance of exploitation in the next 30 days.

The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code via a crafted PDF file.

Affected products

• Tracker-Software PDF-Xchange Viewer: version 2.5 only

Published 2017-12-27. Last modified 2026-06-17.