ownCloud Desktop before 2.2.3 allows local users to execute arbitrary code and possibly gain privileges via a Trojan library in a "special path" in the C: drive.
{
"binaries": [
{
"binary_name": "libowncloudsync0",
"binary_version": "2.1.1+dfsg-1ubuntu1.1"
},
{
"binary_name": "nautilus-owncloud",
"binary_version": "2.1.1+dfsg-1ubuntu1.1"
},
{
"binary_name": "owncloud-client",
"binary_version": "2.1.1+dfsg-1ubuntu1.1"
},
{
"binary_name": "owncloud-client-cmd",
"binary_version": "2.1.1+dfsg-1ubuntu1.1"
},
{
"binary_name": "owncloud-client-l10n",
"binary_version": "2.1.1+dfsg-1ubuntu1.1"
}
]
}