CVE-2021-28134

Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API...

CVE-2021-28134

CVE-2021-28134 (Clipper) affects Clipper prior to 1.0.5. The vulnerability arises from an exposed vulnerable ipcRenderer IPC interface that can invoke the dangerous openExternal API, enabling remote command execution. Affected software: Clipper ≤ 1.0.4. Root cause: IPC message handling to openExt...