PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2017-11421

CVE-2017-11421

gnome-exe-thumbnailer: VBScript Injection when generating thumbnails for MSI files

Loading…

Severity

Important

Red Hat Product Security

7.8

CVSS 3.0

Review impact separately from score.

Published · July 17, 2017

Updated · May 13, 2026

Description

gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails for MSI files, aka the "Bad Taste" issue. There is a local attack if the victim uses the GNOME Files file manager, and navigates to a directory containing a .msi file with VBScript code in its filename.

Statement

This issue did not affect any of the Red Hat products as they did not include the gnome-exe-thumbnailer package.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 7.8
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-94 · Improper Control of Generation of Code ('Code Injection')