CVE-2010-3349 — Ardour vulnerability
6 documents5 sources
Severity
6.9MEDIUMNVD
EPSS
0.0%
top 85.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 20
Latest updateMay 17
Description
Ardour 2.8.11 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVSS vector
AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0
Affected Packages3 packages
🔴Vulnerability Details
2📋Vendor Advisories
1Debian▶
CVE-2010-3349: ardour - Ardour 2.8.11 places a zero-length directory name in the LD_LIBRARY_PATH, which ...↗2010