CVE-2016-9274

Untrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges via a Trojan horse git.exe file in the current working directory. NOTE: 2.x is unaffected.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
VendorProductVersion
git_for_windows_projectgit_for_windows
1.0.0 ≤
𝑥
≤ 1.9.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/94289
https://github.com/git-for-windows/git/issues/944
https://www.youtube.com/watch?v=S7jOLv0sul0
http://www.securityfocus.com/bid/94289
https://github.com/git-for-windows/git/issues/944
https://www.youtube.com/watch?v=S7jOLv0sul0