Package: wine
Version: 0.0.20050310-1.1
Severity: critical
Tags: security

The wine-safe script displays no warning before running an msdos 
program.

This is probably due to the fact that on line 57, XMESSAGE is used 
before having been defined.

Therefore, any MSDOS executable will be run from a browser with *no* 
confirmation from the user.

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.13
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages wine depends on:
ii  debconf                 1.4.30.13        Debian configuration management sy
ii  libwine                 0.0.20050310-1.1 Windows Emulator (Library)
ii  xbase-clients [xcontrib 4.3.0.dfsg.1-14  miscellaneous X clients

-- debconf information:
  wine/del_wine_conf: true
  wine/install_type: Autodetect


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to