CVE-2017-17527

ALTO 8.8CVE-2017-17527 · Published 14/12/2017 · updated 17/06/2026

In breve

CVE-2017-17527 è una vulnerabilità ALTO (CVSS 8.8) che riguarda pasdoc (pasdoc project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.6%, superiore al 76.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
pasdoc pasdoc_project	`= 0.14`	No fix yet

Description

delphi_gui/WWWBrowserRunnerDM.pas in PasDoc 0.14 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer has indicated that the code referencing the BROWSER environment variable is never used

References

security-tracker.debian.org/tracker/CVE-2017-17527 · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free