rpm package
suse/xdg-utils&distro=SUSE Linux Enterprise Server 12 SP3
pkg:rpm/suse/xdg-utils&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-18266 | Hig | 8.8 | < 20140630-6.3.1 | 20140630-6.3.1 | May 10, 2018 | The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by %s i |
- affected < 20140630-6.3.1fixed 20140630-6.3.1
The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by %s i