Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-17513
HistoryDec 14, 2017 - 4:29 p.m.

Design/Logic Flaw

2017-12-1416:29:00
PRIOn knowledge base
www.prio-n.com
3

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.5%

TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to linked_scripts/context/stubs/unix/mtxrun, texmf-dist/scripts/context/stubs/mswin/mtxrun.lua, and texmf-dist/tex/luatex/lualibs/lualibs-os.lua.

CPENameOperatorVersion
tex_livele20170524

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.5%

Related for PRION:CVE-2017-17513