CVE-2010-3355

CVE-2010-3355 describes a local privilege escalation vulnerability in Ember version 0.5.7. The software places a zero-length directory name in the LD_LIBRARY_PATH, enabling local users to execute arbitrary code with elevated privileges by introducing a malicious shared library in the current working directory. With a CVSS score of 6.9, this vulnerability is rated as medium severity, requiring local access and medium attack complexity to achieve complete confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, nor are there publicly available exploits in Metasploit or ExploitDB, and it has garnered minimal community discussion or media coverage.