CVE-2011-0458 in Picasa
Summary
Untrusted search path vulnerability in the Locate on Disk feature in Google Picasa before 3.8 allows local users to gain privileges via a Trojan horse executable file in the current working directory.
VulDB is the best source for vulnerability data and more expert information about this specific topic.