著者: Rick Moen 日付: To: dng 題目: Re: [DNG] VBScript Injection via GNOME Thumbnailer
Quoting Enrico Weigelt, metux IT consult (enrico.weigelt@???):
> On 18.07.2017 08:45, Rick Moen wrote:
>
> >Strictly speaking, I am reasonably sure it doesn't _depend_ on WINE, but
> >merely use it if it's present.
>
> The fact that it silently starts proprietary executables (eg. the
> windows scripting host), just because they're there, indeed is a
> huge bug, more precisely: a fundamental conceptional error.
Clarification: To the best of my understanding, the cscript.exe in
question is WINE LGPLed code, not Microsoft code.