CVE-2017-17516 Reddit Terminal Viewer (RTV) vulnerable to argument injection attacks
HighCVSS 8.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi rtv(PyPI) | <= 1.19.0 | No fix listed |
| pypi rtv(PyPI) | = 1.0 | No fix listed |
| pypi rtv(PyPI) | = 1.0.post1 | No fix listed |
| pypi rtv(PyPI) | = 1.0a2 | No fix listed |
| pypi rtv(PyPI) | = 1.0a3 | No fix listed |
| pypi rtv(PyPI) | = 1.0a4 | No fix listed |
| pypi rtv(PyPI) | = 1.0a5 | No fix listed |
| pypi rtv(PyPI) | = 1.0a6 | No fix listed |
| pypi rtv(PyPI) | = 1.0a7 | No fix listed |
| pypi rtv(PyPI) | = 1.0a8 | No fix listed |
| pypi rtv(PyPI) | = 1.0a9 | No fix listed |
| pypi rtv(PyPI) | = 1.1 | No fix listed |
| pypi rtv(PyPI) | = 1.1.1 | No fix listed |
| pypi rtv(PyPI) | = 1.1.2 | No fix listed |
| pypi rtv(PyPI) | = 1.10.0 | No fix listed |
| pypi rtv(PyPI) | = 1.11.0 | No fix listed |
| pypi rtv(PyPI) | = 1.12.0 | No fix listed |
| pypi rtv(PyPI) | = 1.12.1 | No fix listed |
| pypi rtv(PyPI) | = 1.13.0 | No fix listed |
| pypi rtv(PyPI) | = 1.13.1 | No fix listed |
| pypi rtv(PyPI) | = 1.14.1 | No fix listed |
| pypi rtv(PyPI) | = 1.15.0 | No fix listed |
| pypi rtv(PyPI) | = 1.15.1 | No fix listed |
| pypi rtv(PyPI) | = 1.16.0 | No fix listed |
| pypi rtv(PyPI) | = 1.17.0 | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi rtv(PyPI) | = 1.17.1 | No fix listed |
| pypi rtv(PyPI) | = 1.18.0 | No fix listed |
| pypi rtv(PyPI) | = 1.19.0 | No fix listed |
| pypi rtv(PyPI) | = 1.2 | No fix listed |
| pypi rtv(PyPI) | = 1.2.1 | No fix listed |
| pypi rtv(PyPI) | = 1.2.2 | No fix listed |
| pypi rtv(PyPI) | = 1.3 | No fix listed |
| pypi rtv(PyPI) | = 1.4 | No fix listed |
| pypi rtv(PyPI) | = 1.4.1 | No fix listed |
| pypi rtv(PyPI) | = 1.4.2 | No fix listed |
| pypi rtv(PyPI) | = 1.5 | No fix listed |
| pypi rtv(PyPI) | = 1.6 | No fix listed |
| pypi rtv(PyPI) | = 1.6.1 | No fix listed |
| pypi rtv(PyPI) | = 1.7.0 | No fix listed |
| pypi rtv(PyPI) | = 1.8.0 | No fix listed |
| pypi rtv(PyPI) | = 1.8.1 | No fix listed |
| pypi rtv(PyPI) | = 1.9.0 | No fix listed |
| pypi rtv(PyPI) | = 1.9.1 | No fix listed |
| debian/rtv(Debian:12) | All versions | No fix listed |
| debian/rtv(Debian:12) | = 1.27.0+dfsg-2 | No fix listed |
| reddit terminal viewer project reddit terminal viewer | = 1.19.0 | No fix listed |
| ubuntu/rtv(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/rtv(Ubuntu:22.04) | All versions | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com
- github.com product
- Debian Security Tracker CVE-2017-17516 issue-tracking third-party-advisory vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- pypi.org product
- github.com vendor-advisory