CWE Code: 77
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Neutralization of Special Elements used in a Command ('Command Injection')
Summary: the installpackage function in the installerhelper subcomponent in libmacgpg in gpg suite before 2015.06 allows local users to execute arbitrary commands with root privileges via shell metacharacters in the xmlpath argument.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-02-22
Last Modified Date: 2018-05-02
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Neutralization of Special Elements used in a Command ('Command Injection').
user
CWE Code: 77
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Neutralization of Special Elements used in a Command ('Command Injection')
Summary: the installpackage function in the installerhelper subcomponent in libmacgpg in gpg suite before 2015.06 allows local users to execute arbitrary commands with root privileges via shell metacharacters in the xmlpath argument.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-02-22
Last Modified Date: 2018-05-02
assistant