CVE-2011-2747

no score yetEPSS 4.3%

google picasa: no CVSS score yet. EPSS 4.3% chance of exploitation in the next 30 days.

Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file.

EPSS: 4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2011-07-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

google:picasa

References

http://osvdb.org/73980
http://picasa.google.com/support/bin/static.py?hl=en&page=release_notes.cs&from=53209&rd=1
http://secunia.com/advisories/45293
http://www.microsoft.com/technet/security/advisory/msvr11-008.mspx
https://exchange.xforce.ibmcloud.com/vulnerabilities/68735

Check your stack JSON