Summary
Gabriel Corona discovered that sensible-utils incorrectly validated strings
when launcher a browser with the sensible-browser tool. A remote attacker
could possibly use this issue with a specially crafted URL to conduct an
argument injection attack and execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | sensible-utils | 0.0.9ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | sensible-utils | 0.0.9ubuntu0.16.04.1 |
Vulnerabilities 1
-
Unscored —
sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by th…
References
-
report
https://ubuntu.com/security/CVE-2017-17512