2 ms·
Gnome Linux systems exposed to RCE attacks via file downloads
- FirmwareBurner 3y agoGood thing it wasn't a RCE via thumbnails in the file picker. /s
- hulitu 3y ago> Attackers can successfully exploit the flaw in question (CVE-2023-43641) to execute malicious code by taking advantage of Tracker Miners automatically indexing all downloaded files to update the search index on GNOME Linux devices. But the article blames the libcue. Libcue is not doing the indexing. Why does the search index must contain metadata ?