NVD

Id
15046  
Name
CVE-2010-3689  
Description
soffice in OpenOffice.org (OOo) 3.x before 3.3 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2011-01-28  
Modified Date
2015-11-17  
Seq
2010-3689  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
84028 15046 CVE-2010-3689 USN-1056-1  View
84029 15046 CVE-2010-3689 DSA-2151  View
84030 15046 CVE-2010-3689 GLSA-201408-19  View
84031 15046 CVE-2010-3689 MDVSA-2011:027  View
84032 15046 CVE-2010-3689 http://www.openoffice.org/security/cves/CVE-2010-3689.html  View
84033 15046 CVE-2010-3689 http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html  View
84034 15046 CVE-2010-3689 RHSA-2011:0182  View
84035 15046 CVE-2010-3689 46031  View
84036 15046 CVE-2010-3689 1025004  View
84037 15046 CVE-2010-3689 ADV-2011-0230  View
84038 15046 CVE-2010-3689 ADV-2011-0232  View
84039 15046 CVE-2010-3689 ADV-2011-0279  View
84040 15046 CVE-2010-3689 https://bugzilla.redhat.com/show_bug.cgi?id=641224  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30899 JVNDB-2011-001138 OpenOffice.org の soffice における権限を取得される脆弱性 OpenOffice.org の soffice は、LD_LIBRARY_PATH 内に zero-length ディレクトリネームを配置しているため、権限を取得される脆弱性が存在します。 CVE-2010-3689 46269 CVE-2010-3689 15046 6.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001138.html 2011-01-28 2011-05-10 View