CVE-2011-0458

3 documents3 sources
Severity
6.9MEDIUM
EPSS
0.0%
top 89.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Picasa
Timeline
PublishedMar 28
Latest updateMay 17

Description

Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local users to gain privileges via a Trojan horse executable file in the current working directory.

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages1 packages

▶NVDgoogle/picasa3.6

🔴Vulnerability Details

2
GHSA
GHSA-xr4g-93qp-pf58: Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3↗2022-05-17
▶
CVEList
CVE-2011-0458: Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3↗2011-03-28
▶