CVE-2001-1375

tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory.

Date published : 2003-04-02

http://www.securityfocus.com/bid/3073

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000409