Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local users to gain privileges via a Trojan horse executable file in the current working directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 24.1%