CVE-2017-17524

NONE EPSS 65.0%

Published Dec 14, 20178y ago · Modified Jun 17, 20262w ago

Published Dec 14, 2017 8y ago

Last Modified Jun 17, 2026 2w ago

Description

library/www_browser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.

Threat Intelligence

EPSS Exploit Probability

65.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-74

Affected Products 1

Vendor	Product	Version	Range
swi-prolog	swi-prolog	7.2.3	any

References 1

security-tracker.debian.org https://security-tracker.debian.org/tracker/CVE-2017-17524

Issue TrackingThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.