VYPR
← All advisories
High severity8.8NVD Advisory· Published Dec 14, 2017· Updated Jun 17, 2026

CVE-2017-17514

CVE-2017-17514

Description

boxes.c in nip2 8.4.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that this product does not use the BROWSER environment variable

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Libvips/Nip2references
  • Nip2 Project/Nip2
    cpe:2.3:a:nip2_project:nip2:8.4.0:*:*:*:*:*:*:*
  • Debian/linux4 versions
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.