Security Advisory
CVE-2017-17526
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.