GCVE - cpe:2.3:a:google:picasa:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:google:picasa:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Google (`f181d1eb-7269-5bae-b76e-e66ceb214562`)
Product	Picasa (`65db3221-59b2-59c9-ad2e-be18c9d91fd0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-8221`	vulnerable	2026-06-08 05:07:03.331456	Details available Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CAMF section in a FOVb image, which triggers a heap-based buffer overflow. Published: 2015-11-17T15:00:00.000Z Updated: 2024-08-06T08:13:31.842Z Open on db.gcve.eu Reference links http://secunia.com/secunia_research/2015-5/ http://www.securityfocus.com/archive/1/536878/100/0/threaded http://packetstormsecurity.com/files/134315/Google-Picasa-CAMF-Section-Integer-Overflow.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2747`	vulnerable	2026-06-08 04:58:09.007435	Details available Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file. Published: 2011-07-28T18:00:00.000Z Updated: 2024-08-06T23:08:23.811Z Open on db.gcve.eu Reference links http://osvdb.org/73980 https://exchange.xforce.ibmcloud.com/vulnerabilities/68735 http://secunia.com/advisories/45293 http://picasa.google.com/support/bin/static.py?hl=en&page=release_notes.cs&from=53209&rd=1 http://www.microsoft.com/technet/security/advisory/msvr11-008.mspx	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0458`	vulnerable	2026-06-08 04:56:37.384869	Details available Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local users to gain privileges via a Trojan horse executable file in the current working directory. Published: 2011-03-28T16:00:00.000Z Updated: 2024-08-06T21:51:08.970Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/66295 http://secunia.com/advisories/43853 http://www.securityfocus.com/bid/47031 http://www.vupen.com/english/advisories/2011/0766 http://jvn.jp/en/jp/JVN99977321/index.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4847`	vulnerable	2026-06-08 04:49:57.326371	Details available Google Picasa allows remote attackers to read image files stored by Picasa via unspecified vectors involving a picasa:// URI. NOTE: this information is based upon a vague pre-advisory. Published: 2007-09-12T20:00:00.000Z Updated: 2024-08-07T15:08:33.904Z Open on db.gcve.eu Reference links http://xs-sniper.com/blog/2007/08/20/say-cheeeeeese/ http://osvdb.org/40565	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4824`	vulnerable	2026-06-08 04:49:57.279990	Details available Multiple cross-application scripting (XAS) vulnerabilities in Google Picasa have unspecified attack vectors and impact. NOTE: this information is based upon a vague pre-advisory. Published: 2007-09-11T19:00:00.000Z Updated: 2024-08-07T15:08:33.766Z Open on db.gcve.eu Reference links http://xs-sniper.com/blog/2007/08/20/say-cheeeeeese/ http://osvdb.org/45900	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4823`	vulnerable	2026-06-08 04:49:57.279647	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.