Debian Context vulnerabilities

1 known vulnerability affecting debian/context.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

LOW1

Vulnerabilities

Page 1 of 1

CVE-2017-17513LOWCVSS 8.82017

CVE-2017-17513 [HIGH] CVE-2017-17513: context - TeX Live through 20170524 does not validate strings before launching the program... TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to linked_scripts/context/stubs/unix/mtxrun, texmf-dist/scripts/context/stubs/mswin/mtxrun.lua, and texmf-dist/tex/luatex/lualibs/lualibs-os