Submission + - "Bad Taste" vulnerability in GNOME: VBscript injection 1
KiloByte writes: A new vulnerability, named "Bad Taste, allows arbitrary code execution via the GNOME thumbnailer if you make any GNOME component that displays file icons see a crafted .msi file in a directory you're browsing.
The vulnerability can be triggered only if you have Wine installed, but it comes as no fault of the latter: GNOME misparses file names into a well-formed VBscript invocation.
The vulnerability can be triggered only if you have Wine installed, but it comes as no fault of the latter: GNOME misparses file names into a well-formed VBscript invocation.