CVE Feed

    Dashboard / CVE / CVE-2007-4824

    CVE-2007-4824

    Multiple cross-application scripting (XAS) vulnerabilities in Google Picasa have unspecified attack vectors and impact. NOTE: this information is based upon a vague pre-advisory.

    Published:Sep 11, 2007
    Last Modified:Apr 23, 2026
    EPS:Sep 11, 2007
    EPSS Score:0.00123
    CVSS Score:6.8

    Affected Products

    Vendor
    Google
    Product
    Picasa

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2015-8221 (CVSS 10) — Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code v…
    CVE-2015-8096 (CVSS 10) — Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary…
    CVE-2013-5358 (CVSS 7.5) — Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption vi…
    CVE-2013-5357 (CVSS 7.5) — Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute …
    CVE-2013-5359 (CVSS 7.5) — Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attac…
    CVE-2013-5349 (CVSS 7.5) — Integer underflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute…
    CVE-2011-2747 (CVSS 9.3) — Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows…
    CVE-2011-0458 (CVSS 6.9) — Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local use…
    CVE-2007-4847 (CVSS 5) — Google Picasa allows remote attackers to read image files stored by Picasa via unspecified vectors involving a…
    CVE-2007-4823 (CVSS 7.5) — Multiple buffer overflows in Google Picasa have unspecified attack vectors and impact. NOTE: this information…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High