CVE-2011-0458 - Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows

CVE-2011-0458

Summary

Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local users to gain privileges via a Trojan horse executable file in the current working directory. Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'

References

Vulnerable Configurations

cpe:2.3:a:google:picasa:-:*:*:*:*:*:*:*
cpe:2.3:a:google:picasa:-:*:*:*:*:*:*:*
cpe:2.3:a:google:picasa:3.6:*:*:*:*:*:*:*
cpe:2.3:a:google:picasa:3.6:*:*:*:*:*:*:*

CVSS

Base:	6.9 (as of 17-08-2017 - 01:33)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:M/Au:N/C:C/I:C/A:C

refmap via4

bid	47031
jvn	JVN#99977321
jvndb	JVNDB-2011-000022
osvdb	71281
secunia	43853
vupen	ADV-2011-0766
xf	google-picasa-dll-code-execution(66295)

Last major update

17-08-2017 - 01:33

Published

28-03-2011 - 16:55

Last modified

17-08-2017 - 01:33