:: Re: [DNG] VBScript Injection via GN…
Inizio della pagina
Delete this message
Reply to this message
Autore: Rick Moen
Data:  
To: dng
Oggetto: Re: [DNG] VBScript Injection via GNOME Thumbnailer
Quoting Enrico Weigelt, metux IT consult (enrico.weigelt@???):

> On 18.07.2017 08:45, Rick Moen wrote:
>
> >Strictly speaking, I am reasonably sure it doesn't _depend_ on WINE, but
> >merely use it if it's present.
>
> The fact that it silently starts proprietary executables (eg. the
> windows scripting host), just because they're there, indeed is a
> huge bug, more precisely: a fundamental conceptional error.


Clarification: To the best of my understanding, the cscript.exe in
question is WINE LGPLed code, not Microsoft code.