{"id":"CVE-2017-17512","aliases":["DEBIAN-CVE-2017-17512","DLA-1209-1","DSA-4071-1","EUVD-2017-8673","GHSA-fc69-2v7r-7r95","UBUNTU-CVE-2017-17512","USN-3584-1"],"status":"published","title":"sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the...","description":"sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02355,"percentile":0.83846,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-74"],"published":"2017-12-11T00:00:00Z","modified":"2026-10-15T07:47:38Z","fixes":[{"ecosystem":"Debian:12","package":"sensible-utils","fixed_in":["0.0.11"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sensible-utils","fixed_in":["0.0.11"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sensible-utils","fixed_in":["0.0.11"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"sensible-utils","fixed_in":["0.0.7+deb7u1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"sensible-utils","fixed_in":["0.0.9+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"sensible-utils","fixed_in":["0.0.9+deb9u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"sensible-utils","fixed_in":["0.0.9ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"sensible-utils","fixed_in":["0.0.9ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"sensible-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.11"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sensible-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.11"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sensible-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.11"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"sensible-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.7+deb7u1"}]}],"versions":["0.0.7"]},{"source":"osv","ecosystem":"Debian:8","package":"sensible-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.9+deb8u1"}]}],"versions":["0.0.9"]},{"source":"osv","ecosystem":"Debian:9","package":"sensible-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.9+deb9u1"}]}],"versions":["0.0.9"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"sensible-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.9ubuntu0.14.04.1"}]}],"versions":["0.0.9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sensible-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.9ubuntu0.16.04.1"}]}],"versions":["0.0.9"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"sensible-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.9ubuntu0.14.04.1"}]}],"versions":["0.0.9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sensible-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.9ubuntu0.16.04.1"}]}],"versions":["0.0.9"]}],"products":[{"vendor":"sensible-utils_project","product":"sensible-utils"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://usn.ubuntu.com/3584-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2017/12/msg00012.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://metadata.ftp-master.debian.org/changelogs/main/s/sensible-utils/sensible-utils_0.0.11_changelog","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","report"]},{"url":"https://bugs.debian.org/881767","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://www.debian.org/security/2017/dsa-4071","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17512"},{"url":"https://usn.ubuntu.com/3584-1"},{"url":"https://github.com/advisories/GHSA-fc69-2v7r-7r95"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-17512","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-17512","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3584-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17512","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-17512","description":"sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.","status":"published","published":"2017-12-11T06:00:00Z","modified":"2026-10-14T06:30:29.242Z","updated_at":"2026-11-02T14:33:18.248329Z"}],"euvd":[{"id":"EUVD-2017-8673","description":"sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.","status":"published","published":"2017-12-11T06:00:00Z","modified":"2026-10-14T06:30:29Z","updated_at":"2026-11-02T17:27:17.902641Z"}],"ghsa":[{"id":"GHSA-fc69-2v7r-7r95","title":"sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the...","description":"sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.","status":"published","published":"2022-05-14T03:37:36Z","modified":"2026-10-14T09:31:16Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T15:13:22.867821Z"}],"nvd":[{"id":"CVE-2017-17512","description":"sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.","status":"published","published":"2017-12-11T06:29:00.27Z","modified":"2026-10-14T07:16:39.93Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:04:10.156892Z"}],"osv":[{"id":"CVE-2017-17512","description":"sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.","status":"published","published":"2017-12-11T06:29:00.27Z","modified":"2026-03-14T14:27:16.440616Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:04.853379Z"},{"id":"DEBIAN-CVE-2017-17512","description":"sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.","status":"published","published":"2017-12-11T06:29:00.27Z","modified":"2026-10-15T07:47:38.314056111Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"UBUNTU-CVE-2017-17512","description":"sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.","status":"published","published":"2017-12-11T00:00:00Z","modified":"2026-02-04T02:56:57.436139Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.563448Z"},{"id":"DLA-1209-1","title":"sensible-utils - security update","status":"published","published":"2017-12-15T00:00:00Z","modified":"2026-03-09T01:00:57.868297Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4071-1","title":"sensible-utils - security update","status":"published","published":"2017-12-21T00:00:00Z","modified":"2026-03-09T01:19:39.324365Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"USN-3584-1","title":"sensible-utils vulnerability","description":"Gabriel Corona discovered that sensible-utils incorrectly validated strings\nwhen launcher a browser with the sensible-browser tool. A remote attacker\ncould possibly use this issue with a specially crafted URL to conduct an\nargument injection attack and execute arbitrary code.\n","status":"published","published":"2018-02-26T14:31:09Z","modified":"2026-02-10T04:41:17Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}