CVE-2017-17529: High severity Abisource Abiword vulnerability
Published Dec 14, 2017
·Updated
af/util/xp/utgofile.cpp in AbiWord 3.0.2-2 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Affected Software
2 affected components
Abisource Abiword=3.0.2-2
debian/abiword<=3.0.4~dfsg-3, <=3.0.5~dfsg-3.2, <=3.0.6~dfsg-1, <=3.0.7~dfsg-4, <=3.0.8+ds-1
Event History
Dec 14, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Feb 19, 2026
Data Sourced
via Debian·10:02 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-17529?
CVE-2017-17529 is considered a medium severity vulnerability due to its potential for argument-injection attacks.
2
How do I fix CVE-2017-17529?
To fix CVE-2017-17529, upgrade to AbiWord version 3.0.2-9 or later.
3
What kind of attacks can CVE-2017-17529 lead to?
CVE-2017-17529 can lead to remote attackers conducting argument-injection attacks using crafted URLs.
4
Which versions of AbiWord are affected by CVE-2017-17529?
AbiWord versions 3.0.2-2 and earlier are affected by CVE-2017-17529.
5
Is CVE-2017-17529 relevant for Debian users?
Yes, CVE-2017-17529 is particularly relevant for Debian users running the affected versions of AbiWord.