CVE-2010-3349

EPSS 0.05%

Published: 10/20/2010Modified: 4/28/2026

Description

Ardour 2.8.11 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Affected packages (1)

Debian/ardourfrom 0, < 1:2.8.11-2

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2010-3349