lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-12-11T06:00:00
Updated: 2024-08-05T20:51:32.318Z
Reserved: 2017-12-11T00:00:00
Link: CVE-2017-17523
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-12-11T06:29:00.300
Modified: 2017-12-29T15:38:34.293
Link: CVE-2017-17523
Redhat
No data.