CVE-2017-11421: gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails for MSI file...

Security readout for executives and security teams

This issue can let a malicious MSI filename trigger unwanted script handling when a Linux desktop user browses a folder in GNOME Files. It requires local user interaction and a vulnerable gnome-exe-thumbnailer version, so business urgency depends on desktop exposure and untrusted file workflows. Exposure is most likely on Linux desktop systems using GNOME Files with gnome-exe-thumbnailer installed before 0.9.5. Servers are unlikely to be exposed unless users browse untrusted directories through the affected desktop workflow. Treat this as a targeted desktop hardening item, not an internet-facing emergency. Prioritize environments where staff regularly handle untrusted installer files or shared folders on GNOME desktops. Mitigation focus: Upgrade gnome-exe-thumbnailer to 0.9.5 or later where available.; Disable or remove gnome-exe-thumbnailer if executable thumbnails are unnecessary.; Avoid browsing untrusted folders containing MSI files until remediated..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.