CVE-2016-10075

Description

The tqdm._version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory.

References

https://security.gentoo.org/glsa/201807-01

https://github.com/tqdm/tqdm/issues/328

http://www.securityfocus.com/bid/95143

http://www.openwall.com/lists/oss-security/2016/12/28/8

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3