CVE-2017-17516

scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
References
Link Resource
https://security-tracker.debian.org/tracker/CVE-2017-17516 Issue Tracking Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:reddit_terminal_viewer_project:reddit_terminal_viewer:1.19.0:*:*:*:*:*:*:*

Information

Published : 2017-12-14 08:29

Updated : 2017-12-29 07:39


NVD link : CVE-2017-17516

Mitre link : CVE-2017-17516


JSON object : View

CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Advertisement

dedicated server usa

Products Affected

reddit_terminal_viewer_project

  • reddit_terminal_viewer