Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to execute arbitrary code via a crafted RAW file, as demonstrated using a KDC file with a certain size.
https://support.google.com/picasa/answer/53209
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-5199
http://www.securitytracker.com/id/1029527