CVE-2010-3393

CVE-2010-3393 affects Magics++ 2.10.0 via the magics-config component. The root cause is a zero-length directory name placed into LD_LIBRARY_PATH, enabling local users to gain privileges by loading a Trojan-horse shared library from the current working directory. The provided connected sources co...