CVE-2010-3354

CVE-2010-3354 describes a local privilege escalation vulnerability in Dropbox 0.7.110, where the dropboxd process places a zero-length directory name in LD_LIBRARY_PATH. This allows a local attacker to execute arbitrary code with elevated privileges by placing a malicious shared library in the current working directory. The vulnerability has a CVSS score of 6.9, indicating high impact on confidentiality, integrity, and availability, with medium attack complexity. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.