CVE-2017-17534

HIGH 8.8CVE-2017-17534 · Published 14/12/2017 · updated 17/06/2026

In short

CVE-2017-17534 is a HIGH (CVSS 8.8) vulnerability affecting mensis (mensis project).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mensis mensis_project	`= 0.0.080507`	No fix yet

Description

uiutil.c in Mensis 0.0.080507 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, a different vulnerability than CVE-2017-17521.

References

security-tracker.debian.org/tracker/CVE-2017-17534 · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free