:: Re: [DNG] VBScript Injection via GN…
Kezdőlap
Delete this message
Reply to this message
Szerző: Joachim Fahrner
Dátum:  
Címzett: dng
Tárgy: Re: [DNG] VBScript Injection via GNOME Thumbnailer
Am 2017-07-18 09:39, schrieb Rick Moen:
> OTOH, clearly the parser code in /usr/bin/gnome-exe-thumbnailer is
> rubbish, as it shouldn't be possible to fool it into processing
> embedded
> VBSCript in a filename.


That's the point. All these things made by Poettering, Gnome Team, Read
Hat ... are rubbish monsters, too complex to make them safe. They put
all things in they can think of. A thumbnailer that depends on wine!
Unbelievable! That's no good and clean software.

Jochen