CVE-2017-11421

gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails for MSI files, aka the "Bad Taste" issue. There is a local attack if the victim uses the GNOME Files file manager, and navigates to a directory containing a .msi file with VBScript code in its filename.

Date published : 2017-07-18

http://www.securityfocus.com/bid/99922

http://news.dieweltistgarnichtso.net/posts/gnome-thumbnailer-msi-fail.html