CVE-2017-17526 Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-i...
HighCVSS 8.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/giac(Debian:12) | All versions | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.35+dfsg2-1.1 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.37+dfsg2-1 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.43+dfsg2-1 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.57+dfsg2-1 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.57+dfsg2-2 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.57+dfsg2-3 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.57+dfsg2-4 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.59+dfsg2-1 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.69+dfsg2-1 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.69+dfsg2-1.1 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.69+dfsg2-1.1~exp1 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.93+dfsg2-1 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.93+dfsg2-2 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.93+dfsg2-3 | No fix listed |
| debian/giac(Debian:12) | = 1.9.0.93+dfsg2-4 | No fix listed |
| debian/giac(Debian:13) | All versions | No fix listed |
| debian/giac(Debian:13) | = 1.9.0.93+dfsg2-3 | No fix listed |
| debian/giac(Debian:13) | = 1.9.0.93+dfsg2-4 | No fix listed |
| debian/giac(Debian:14) | All versions | No fix listed |
| debian/giac(Debian:14) | = 1.9.0.93+dfsg2-3 | No fix listed |
| debian/giac(Debian:14) | = 1.9.0.93+dfsg2-4 | No fix listed |
| giac project giac | = 1.2.3.57 | No fix listed |
| ubuntu/giac(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/giac(Ubuntu:26.04) | All versions | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/giac(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/giac(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2017-17526 issue-tracking third-party-advisory vendor-advisory