Hi.
If you open cmd.exe and type (paste) the command below:
{“results”:[“q”, "
rfd
“||
calc
||”,"I love
rfd
"]}
the process calc.exe will be executed with no consent whatsoever. (not even ENTER is necessary).
CIS hasn’t signaled me anything.
Can anyone else test this?
EDIT: I also made a video to demonstrate:
http://tinypic.com/player.php?v=iehyty>&s=8#.VEPktsmOAek