CVE-2010-3394

Source
https://cve.org/CVERecord?id=CVE-2010-3394
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2010-3394.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2010-3394
Downstream
Withdrawn
2026-01-27T04:10:26.919802Z
Published
2010-10-20T18:00:04Z
Modified
2026-01-27T04:10:26.919802Z
Summary
[none]
Details

The (1) texmacs and (2) tmmupadhelp scripts in TeXmacs 1.0.7.4 place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

References

Affected packages