CVE-2010-3378

CVE-2010-3378 describes a local privilege escalation vulnerability affecting Scilab 5.2.2. The scilab, scilab-cli, and scilab-adv-cli scripts improperly add a zero-length directory to LD_LIBRARY_PATH, allowing local users to execute malicious code. With a CVSS score of 6.9, this vulnerability has high impact on confidentiality, integrity, and availability, but requires medium attack complexity and local access. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.