Design/Logic Flaw

Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local users to gain privileges via a Trojan horse executable file in the current working directory...

CVE-2011-0458

Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local users to gain privileges via a Trojan horse executable file in the current working directory...

CVE-2011-0458

CVE-2011-0458 is a local privilege escalation in Google Picasa up to version 3.7 where the vulnerability stems from an untrusted search path in the Locate on Disk feature. An attacker could place a Trojan horse executable in the current working directory to gain privileges when Picasa loads libra...

Picasa may insecurely load executable files

Overview Picasa may use unsafe methods for determining how to load executables .exe Picasa is a software for viewing and managing photos. Picasa loads certain executables when using the "Locate on Disk" function. Picasa contains an issue with the file search path, which may insecurely load...

JVN#99977321: Picasa may insecurely load executable files

Picasa is a software for viewing and managing photos. Picasa loads certain executables when using the "Locate on Disk" function. Picasa contains an issue with the file search path, which may insecurely load executables. Impact An attacker may execute arbitrary code with the privilege of the runni...

Google Picasa < 3.8 Path Subversion Arbitrary DLL Injection Code Execution

The version of Google Picasa running on the remote host is earlier than 3.8. Such versions insecurely look in their current working directory when resolving DLL dependencies. Attackers may exploit the issue by placing a specially crafted DLL file and another file associated with the application i...

Earn Rewards for Finding Security Flaws in Gmail, YouTube, and More

Google is on the hunt for hackers to find security vulnerabilities in popular web applications like Gmail, Blogger, and YouTube. The tech giant is offering rewards starting at $500 per bug. For vulnerabilities that are "severe or unusually clever," the payout can reach up to $3,133.70...

CVE-2010-1306

Directory traversal vulnerability in the Picasa comjoomlapicasa2 component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbitrary local files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in the Picasa comjoomlapicasa2 component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbitrary local files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1306

Directory traversal vulnerability in the Picasa comjoomlapicasa2 component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbitrary local files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1306

Joomla! Picasa component (com_joomlapicasa2) versions 2.0 and 2.0.5 are affected by a local file inclusion (directory traversal) vulnerability. An attacker can read arbitrary local files by injecting a ".." sequence into the controller parameter of index.php, exposing sensitive data. Impact is de...

Joomla Picasa 2.0 Local File Inclusion

Exploit Title: Joomla Component Picasa 2.0 LFI Vulnerability Date: Monday, 05 April 2010 Author: Vrs-hCk Software Link: http://prof3ta.netsons.org/ Version: Joomla Component Picasa version 2.0 Tested on: CVE : Code :...

Joomla! Component Picasa 2.0 - Local File Inclusion

Joomla! Component Picasa 2.0 - Local File Inclusion Exploit Title: Joomla Component Picasa 2.0 LFI Vulnerability Date: Monday, 05 April 2010 Author: Vrs-hCk Software Link: http://prof3ta.netsons.org/ Version: Joomla Component Picasa version 2.0 Tested on: CVE : Code :...

Joomla Component Picasa 2.0 LFI Vulnerability

Exploit for php platform in category web applications ============================================= Joomla Component Picasa 2.0 LFI Vulnerability ============================================= Exploit Title: Joomla Component Picasa 2.0 LFI Vulnerability Date: Monday, 05 April 2010 Author: Vrs-hCk...

Joomla! Component Picasa 2.0 - Local File Inclusion

Exploit Title: Joomla Component Picasa 2.0 LFI Vulnerability Date: Monday, 05 April 2010 Author: Vrs-hCk Software Link: http://prof3ta.netsons.org/ Version: Joomla Component Picasa version 2.0 Tested on: CVE : Code :...

Google Picasa Detection (Windows)

Google Picasa, a photo organizer from Google, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45048; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"Google Picas...

Google Picasa < 3.6 Build 105.41

The version of Google Picasa running on the remote host reportedly has an integer overflow vulnerability when processing specially crafted JPEG files. This can lead to a heap overflow. A remote attacker could exploit this by tricking a user into opening a maliciously crafted JPEG file, resulting ...

Google Picasa Heap Overflow Hole Closed

Secunia reports a hole in Google’s Picasa image management and editing software that allows attackers to compromise Windows using specially crafted JPEG images to provoke an integer overflow in the PicasaPhotoViewer.exe file, which can then be exploited to cause a heap overflow. Google closed the...

Google Picasa JPEG Image Processing Integer Overflow Vulnerability

A vulnerability has been identified in Google Picasa, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by an integer overflow error in "PicasaPhotoViewer.exe" when processing malformed JPEG images, which could be exploited by attackers to execute...

Google Picasa 3.5 Local DoS Buffer Overflow

No description provided by source. Connection of the HackTalk team recently found a buffer overflow in the Picasa software by Google. Below is the write up. Pentest Information: ==================== Connection has discovered a Buffer Overflow in Picasa 3.5 created by Google. An attacker is able t...