VDB
GCVE-VVD-MAGEIA-2018-289
GCVE-VVD-MAGEIA-2018-289
Advisory Published
Updated xdg-utils package fixes security vulnerability:
The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate
strings before launching the program specified by the BROWSER environment
variable, which might allow remote attackers to conduct argument-injection
attacks via a crafted URL, as demonstrated by %s in this environment variable
(CVE-2017-18266).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | xdg-utils | 0 (affected), 1.1.3-1.mga6 (unaffected) | — |
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.