CVE-2017-1000424

2018-01-0220:29:00

Google

osv.dev

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%

JSON

Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control.

CPENameOperatorVersion
electroneq1.7.3
electroneq1.7.2
electroneq1.6.5
electroneq1.6.4
electroneq1.6.6
electroneq1.7.0
electroneq1.7.4
electroneq1.7.5
electroneq1.7.1
electroneq1.6.8

Name	Operator	Version
electron	eq	1.7.3
electron	eq	1.7.2
electron	eq	1.6.5
electron	eq	1.6.4
electron	eq	1.6.6
electron	eq	1.7.0
electron	eq	1.7.4
electron	eq	1.7.5
electron	eq	1.7.1
electron	eq	1.6.8