PT-2017-14832 · Fontforge +3 · Fontforge +3

Name of the Vulnerable Software and Affected Versions: FontForge versions prior to 20170731 Description: The issue concerns the uiutil.c component in FontForge, which fails to validate strings before launching a program specified by the BROWSER environment variable. This could potentially allow...

PT-2017-14825 · Vips +2 · Nip2 +2

Name of the Vulnerable Software and Affected Versions: nip2 version 8.4.0 Description: The issue concerns the lack of validation for strings before launching a program specified by the BROWSER environment variable, potentially allowing remote attackers to conduct argument-injection attacks via a...

PT-2017-14824

Name of the Vulnerable Software and Affected Versions TeX Live versions through 20170524 Description The issue is related to the lack of validation of strings before launching the program specified by the BROWSER environment variable. This could allow remote attackers to conduct argument-injectio...

PT-2017-14834

Name of the Vulnerable Software and Affected Versions SWI-Prolog version 7.2.3 Description The issue is related to the library/www browser.pl in SWI-Prolog, which does not validate strings before launching the program specified by the BROWSER environment variable. This could allow remote attacker...

PT-2017-14835

Name of the Vulnerable Software and Affected Versions xTuple PostBooks version 4.7.0 Description The issue concerns the guiclient/guiclient.cpp component in xTuple PostBooks, which fails to validate strings before launching a program specified by the BROWSER environment variable. This could...

PT-2017-14838

Name of the Vulnerable Software and Affected Versions ScummVM version 1.9.0 Description The issue concerns the failure to validate strings before launching a program specified by the BROWSER environment variable. This could allow remote attackers to conduct argument-injection attacks via a crafte...

PT-2017-14836

Name of the Vulnerable Software and Affected Versions Giac version 1.2.3.57 Description The issue concerns the failure to validate strings before launching a program specified by the BROWSER environment variable, potentially allowing remote attackers to conduct argument-injection attacks via a...

PT-2017-14822

Name of the Vulnerable Software and Affected Versions KildClient version 3.1.0 Description The issue is related to the lack of validation of strings before launching a program specified by the BROWSER environment variable. This could allow remote attackers to conduct argument-injection attacks vi...

PT-2017-14839

Name of the Vulnerable Software and Affected Versions AbiWord version 3.0.2-2 Description The issue concerns the failure to validate strings before launching a program specified by the BROWSER environment variable. This could allow remote attackers to conduct argument-injection attacks via a...

PT-2017-14841

Name of the Vulnerable Software and Affected Versions GNU GLOBAL version 4.8.6 Description The issue arises from the failure to validate strings before launching a program specified by the BROWSER environment variable, potentially allowing remote attackers to conduct argument-injection attacks vi...

PT-2017-14844

Name of the Vulnerable Software and Affected Versions Mensis version 0.0.080507 Description The issue is related to the uiutil.c file in Mensis, which does not validate strings before launching a program specified by the BROWSER environment variable. This could allow remote attackers to conduct...

PT-2017-14842

Name of the Vulnerable Software and Affected Versions Kiwi version 1.9.22 Description The issue concerns the lack of validation for strings before launching a program specified by the BROWSER environment variable. This could potentially allow remote attackers to conduct argument-injection attacks...

PT-2017-14845

Name of the Vulnerable Software and Affected Versions gjots2 version 2.4.1 Description The issue concerns the lack of validation for strings before launching a program specified by the BROWSER environment variable. This could potentially allow remote attackers to conduct argument-injection attack...

PT-2017-14827

Name of the Vulnerable Software and Affected Versions Reddit Terminal Viewer RTV version 1.19.0 Description The issue concerns the scripts/inspect webbrowser.py script in RTV, which fails to validate strings before launching the program specified by the BROWSER environment variable. This could...

Atlassian Bamboo Multiple Vulnerabilities

Atlassian Bamboo is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:atlassian:bamboo"; if...

PT-2017-14837 · Pasdoc · Pasdoc

Name of the Vulnerable Software and Affected Versions: PasDoc version 0.14 Description: The issue concerns the delphi gui/WWWBrowserRunnerDM.pas file in PasDoc 0.14, which does not validate strings before launching the program specified by the BROWSER environment variable. This might allow remote...

PT-2017-14831 · Tin +2 · Tin +2

Name of the Vulnerable Software and Affected Versions: TIN version 2.4.1 Description: The issue concerns the tools/url handler.pl script in TIN, which does not validate strings before launching the program specified by the BROWSER environment variable. This might allow remote attackers to conduct...

CVE-2017-17529: Improper Neutralization of Special Elements in Output Used by a Downstream Component

af/util/xp/utgofile.cpp in AbiWord 3.0.2-2 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

CVE-2017-17526: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

CVE-2017-17519: Improper Neutralization of Special Elements in Output Used by a Downstream Component

batteriesConfig.mlp in OCaml Batteries Included aka ocaml-batteries 2.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...