CVE-2017-1000424

2022-10-0316:23:10

mitre

www.cve.org

github electron

version 1.6.4 - 1.6.11

version 1.7.0 - 1.7.5

url spoofing

vulnerability

pdfium

arbitrary pdfs

hacker control

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%

JSON

Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control.

References

github.com/electron/electron/pull/10008

github.com/electron/electron/pull/10008/files