CVE-2022-37290 – Ubuntu Security Notice USN-5786-1

https://notcve.org/view.php?id=CVE-2022-37290

14 Nov 2022 — GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive. GNOME Nautilus 42.2 permite una desreferencia del puntero NULL y el bloqueo de la aplicación get_basename a través de un archivo ZIP pegado. It was discovered that GNOME Files incorrectly handled certain filenames. An attacker could possibly use this issue to cause GNOME Files to crash, leading to a denial of service. • https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376 • CWE-476: NULL Pointer Dereference •