CVE-2017-17511

ALTO 8.8CVE-2017-17511 · Published 14/12/2017 · updated 17/06/2026

En resumen

CVE-2017-17511 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a kildclient (kildclient).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.7%, mayor que el 77.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
kildclient kildclient	`= 3.1.0`	No fix yet

Description

KildClient 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to prefs.c and worldgui.c.

References

lists.debian.org/debian-lts-announce/2017/12/msg00013.html · Mailing List
security-tracker.debian.org/tracker/CVE-2017-17511 · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free