CVE-2017-17527

Name of the Vulnerable Software and Affected Versions PasDoc version 0.14

Description The issue concerns the delphi gui/WWWBrowserRunnerDM.pas file in PasDoc 0.14, which does not validate strings before launching the program specified by the BROWSER environment variable. This might allow remote attackers to conduct argument-injection attacks via a crafted URL. A software maintainer has indicated that the code referencing the BROWSER environment variable is never used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.