CVE-2017-17526

CVE-2017-17526 affects Bernard Parisse Giac 1.2.3.57 in Input.cc, which does not validate strings before launching the program specified by the BROWSER environment variable. This can enable remote argument-injection attacks via a crafted URL. The vulnerability is described with high impact: CVSSv...