high8.8
CVE-2017-17511
KildClient 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to co…
Impact
KildClient 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to prefs.c and worldgui.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kildclient | Kildclient | Version 3.1.0 |
| Debian | Debian Linux | Versions 7.0, 8.0 |