UBUNTU-CVE-2017-14604

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2017-14604
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-14604.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2017-14604
Related
Published
2017-09-20T08:29:00Z
Modified
2025-01-13T10:21:27Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in which a .desktop file's Name field ends in .pdf but this file's Exec field launches a malicious "sh -c" command. In other words, Nautilus provides no UI indication that a file actually has the potentially unsafe .desktop extension; instead, the UI only shows the .pdf extension. One (slightly) mitigating factor is that an attack requires the .desktop file to have execute permission. The solution is to ask the user to confirm that the file is supposed to be treated as a .desktop file, and then remember the user's answer in the metadata::trusted field.

References

Affected packages

Ubuntu:Pro:16.04:LTS / nautilus

Package

Name
nautilus
Purl
pkg:deb/ubuntu/nautilus@1:3.18.4.is.3.14.3-0ubuntu6?arch=source&distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1:3.*

1:3.14.2-0ubuntu12
1:3.14.2-0ubuntu14
1:3.14.2-0ubuntu15
1:3.18.2-1ubuntu1
1:3.18.2-1ubuntu2
1:3.18.2-1ubuntu3
1:3.18.3-0ubuntu1
1:3.18.4-0ubuntu1
1:3.18.4-0ubuntu2
1:3.18.4.is.3.14.3-0ubuntu1
1:3.18.4.is.3.14.3-0ubuntu2
1:3.18.4.is.3.14.3-0ubuntu3
1:3.18.4.is.3.14.3-0ubuntu4
1:3.18.4.is.3.14.3-0ubuntu5
1:3.18.4.is.3.14.3-0ubuntu6

Ecosystem specific 

{
    "ubuntu_priority": "low"
}

Ubuntu:18.04:LTS / nautilus

Package

Name
nautilus
Purl
pkg:deb/ubuntu/nautilus@1:3.26.0-0ubuntu1?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:3.26.0-0ubuntu1

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "1:3.26.0-0ubuntu1",
            "binary_name": "gir1.2-nautilus-3.0"
        },
        {
            "binary_version": "1:3.26.0-0ubuntu1",
            "binary_name": "libnautilus-extension-dev"
        },
        {
            "binary_version": "1:3.26.0-0ubuntu1",
            "binary_name": "libnautilus-extension1a"
        },
        {
            "binary_version": "1:3.26.0-0ubuntu1",
            "binary_name": "libnautilus-extension1a-dbgsym"
        },
        {
            "binary_version": "1:3.26.0-0ubuntu1",
            "binary_name": "nautilus"
        },
        {
            "binary_version": "1:3.26.0-0ubuntu1",
            "binary_name": "nautilus-data"
        },
        {
            "binary_version": "1:3.26.0-0ubuntu1",
            "binary_name": "nautilus-dbgsym"
        }
    ]
}