CVE-2010-3689

CVE-2010-3689 describes a local privilege escalation vulnerability in OpenOffice.org 3.x before 3.3, where the soffice component places a zero-length directory name in LD_LIBRARY_PATH. This flaw allows local attackers to gain elevated privileges by tricking the application into loading a malicious shared library from the current working directory. With a CVSS score of 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C), this vulnerability has high impact on confidentiality, integrity, and availability, but requires medium attack complexity and local access. There is no evidence of active exploitation, readily available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.