CVE-2010-3364

CVE-2010-3364 describes a local privilege escalation vulnerability in VIPS 7.22.2, specifically within the vips-7.22 script. The script inadvertently adds a zero-length directory name to LD_LIBRARY_PATH, enabling local attackers to execute malicious code via a Trojan horse shared library. With a CVSS score of 6.9, this vulnerability has high impact on confidentiality, integrity, and availability, but requires medium attack complexity and local access. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.