VBScript Injection Vulnerability in GNOME Files with gnome-exe-thumbnailer
CVE-2017-11421
7.8HIGH
Key Information:
- Status
- Vendor
- CVE Published:
- 18 July 2017
What is CVE-2017-11421?
The gnome-exe-thumbnailer is susceptible to a VBScript Injection flaw prior to version 0.9.5. This vulnerability allows a local attacker to exploit the GNOME Files file manager. The issue occurs when generating thumbnails for MSI files that contain VBScript code in their filenames, leading to possible execution of malicious scripts when a victim navigates to the affected directory.