CVE-2019-11461

CVE-2019-11461 affects GNOME Nautilus: a compromised thumbnailer can escape the bubblewrap sandbox by abusing TIOCSTI on 64-bit systems, due to improper filtering. Affected: Nautilus 3.30 before 3.30.6 and 3.32 before 3.32.1. Impact: local sandbox escape; the issue is analogous to CVE-2019-10063....

CVE-2022-37290

CVE-2022-37290 affects GNOME Nautilus (GNOME Nautilus 42.2) and is triggered by pasting a crafted ZIP archive, causing a NULL pointer dereference and an application crash. The vulnerability is exploitable locally with low privileges and no user interaction required, per the CVSS data. Several con...

CVE-2017-12447

GDK-PixBuf (gdk-pixbuf), possibly 2.32.2, used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, is affected by CVE-2017-12447. A crafted BMP/FILE_FOLDER could trigger a denial of service via stack corruption, with possible unspecified impact. The available sources consistently reference GdkPixBuf’s vuln...

CVE-2017-14604

GNOME Nautilus before 3.23.90 is vulnerable to spoofing a file type via the .desktop extension, allowing a .desktop file (e.g., named as something.pdf) whose Exec launches a malicious command to be displayed as a safe document. The attack depends on the file having execute permissions, and Nautil...