CVE-2017-14604
Description
GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in which a .desktop file's Name field ends in .pdf but this file's Exec field launches a malicious "sh -c" command. In other words, Nautilus provides no UI indication that a file actually has the potentially unsafe .desktop extension; instead, the UI only shows the .pdf extension. One (slightly) mitigating factor is that an attack requires the .desktop file to have execute permission. The solution is to ask the user to confirm that the file is supposed to be treated as a .desktop file, and then remember the user's answer in the metadata::trusted field.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:a:gnome:nautilus:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnome:nautilus:*:*:*:*:*:*:*:*range: <3.23.90
- (no CPE)range: <3.23.90
- osv-coords8 versionspkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/nautilus&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3
< 3.20.3-23.3.14+ 7 more
- (no CPE)range: < 3.20.3-23.3.14
- (no CPE)range: < 2.28.4-1.16.21.3.1
- (no CPE)range: < 3.20.3-23.3.14
- (no CPE)range: < 2.28.4-1.16.21.3.1
- (no CPE)range: < 3.20.3-23.3.14
- (no CPE)range: < 2.28.4-1.16.21.3.1
- (no CPE)range: < 3.20.3-23.3.14
- (no CPE)range: < 3.20.3-23.3.14
Patches
Vulnerability mechanics
References
9- github.com/GNOME/nautilus/commit/1630f53481f445ada0a455e9979236d31a8d3bb0nvdIssue TrackingPatchThird Party Advisory
- github.com/GNOME/nautilus/commit/bc919205bf774f6af3fa7154506c46039af5a69bnvdIssue TrackingPatchThird Party Advisory
- micahflee.com/2017/04/breaking-the-security-model-of-subgraph-os/nvdExploitThird Party Advisory
- www.debian.org/security/2017/dsa-3994nvdThird Party Advisory
- www.securityfocus.com/bid/101012nvdThird Party AdvisoryVDB Entry
- access.redhat.com/errata/RHSA-2018:0223nvdThird Party Advisory
- bugs.debian.org/cgi-bin/bugreport.cginvdIssue TrackingThird Party Advisory
- bugzilla.gnome.org/show_bug.cginvdIssue TrackingVendor Advisory
- github.com/freedomofpress/securedrop/issues/2238nvdThird Party Advisory
News mentions
0No linked articles in our index yet.