Candidate: CVE-2010-3357 PublicDate: 2010-10-20 18:00:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3357 Description: gnome-subtitles 1.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_gnome-subtitles: upstream_gnome-subtitles: released (1.0-2) dapper_gnome-subtitles: DNE hardy_gnome-subtitles: ignored (reached end-of-life) jaunty_gnome-subtitles: ignored (reached end-of-life) karmic_gnome-subtitles: ignored (reached end-of-life) lucid_gnome-subtitles: ignored (reached end-of-life) maverick_gnome-subtitles: ignored (reached end-of-life) natty_gnome-subtitles: not-affected (1.0-2) oneiric_gnome-subtitles: not-affected (1.0-2) precise_gnome-subtitles: not-affected (1.0-2) quantal_gnome-subtitles: not-affected (1.0-2) raring_gnome-subtitles: not-affected (1.0-2) saucy_gnome-subtitles: not-affected (1.0-2) devel_gnome-subtitles: not-affected (1.0-2)