Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2018-10992 →

DEBIAN-CVE-2018-10992

lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument, because the GNU Guile code uses the system Scheme procedure instead of the system* Scheme procedure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-17523.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 lilypond

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.2-13"}]}]

Debian:13 lilypond

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.2-13"}]}]

Debian:14 lilypond

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.2-13"}]}]

Références

advisory security-tracker.debian.org