Electron · Electron · CVE-2017-1000424
**Name of the Vulnerable Software and Affected Versions**
Electron versions 1.6.4 through 1.6.11
Electron versions 1.7.0 through 1.7.5
**Description**
The issue allows for a URL Spoofing problem when opening PDFs in PDFium, resulting in the loading of arbitrary PDFs that a hacker can control.
**Recommendations**
For Electron versions 1.6.4 through 1.6.11, update to a version outside of this range to resolve the issue.
For Electron versions 1.7.0 through 1.7.5, update to a version outside of this range to resolve the issue.
As a temporary workaround, consider restricting the use of PDFium for opening PDFs until a patch is available.