Launchpad.net

CVE 2016-10323

Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophoto_dsm_user --copy-no-ea" command.

See the CVE page on Mitre.org for more details.