CVE-2017-14604

CVE-2017-14604 describes a file type spoofing vulnerability in GNOME Nautilus before version 3.23.90, affecting Debian and GNOME Nautilus products. Attackers can disguise malicious .desktop files as benign files (e.g., .pdf) by manipulating the Name field, with Nautilus failing to indicate the true, potentially unsafe extension to the user. This medium-severity vulnerability (CVSS 6.5) requires the malicious file to have execute permissions and involves a network attack vector with low complexity, potentially leading to high integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this vulnerability.