Lucene search

K
cve[email protected]CVE-2011-0458
HistoryMar 28, 2011 - 4:55 p.m.

CVE-2011-0458

2011-03-2816:55:04
web.nvd.nist.gov
25
cve
2011
0458
untrusted search path
vulnerability
google picasa
privileges
trojan horse
executable file

6.3 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Affected configurations

NVD
Node
googlepicasaRangeโ‰ค3.6
CPENameOperatorVersion
google:picasagoogle picasale3.6

6.3 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%