Lucene search

K
cvelistMitreCVELIST:CVE-2017-17523
HistoryDec 11, 2017 - 6:00 a.m.

CVE-2017-17523

2017-12-1106:00:00
mitre
www.cve.org
2

AI Score

8.4

Confidence

High

EPSS

0.006

Percentile

78.9%

lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.

AI Score

8.4

Confidence

High

EPSS

0.006

Percentile

78.9%