CVE-2017-17526High · CVSS 8.8EPSS 1.22%No fix publishedCVE-2017-17526Input.cc in Bernard Parisse Giac 1.2.3.57 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.giacOperating systemsPublished December 14, 2017Updated August 5, 2024Source advisory 1 ↗Source advisory 2 ↗