CVE-2010-3996

CVE-2010-3996 describes a local privilege escalation vulnerability in the festival_server component of CSTR Festival, likely versions 2.0.95-beta and earlier. The flaw stems from the server placing a zero-length directory name in the LD_LIBRARY_PATH, allowing local attackers to execute arbitrary code with elevated privileges by introducing a malicious shared library. With a CVSS score of 6.9, this vulnerability is of medium complexity to exploit but has a high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.