CVE-2017-14604

GNOME Nautilus before 3.23.90 is vulnerable to spoofing a file type via the .desktop extension, allowing a .desktop file (e.g., named as something.pdf) whose Exec launches a malicious command to be displayed as a safe document. The attack depends on the file having execute permissions, and Nautil...