CVE Feed

    Dashboard / CVE / CVE-2010-4000

    CVE-2010-4000

    gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

    Published:Nov 5, 2010
    Last Modified:Apr 11, 2025
    EPS:Nov 5, 2010
    EPSS Score:0.00046
    CVSS Score:6.9

    Affected Products

    Vendor
    Gnome
    Product
    Gnome-shell

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-43090 (CVSS 5.5) — A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to vi…
    CVE-2021-3982 (CVSS 5.5) — Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An atta…
    CVE-2021-20315 (CVSS 6.1) — A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, …
    CVE-2020-17489 (CVSS 4.3) — An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an …
    CVE-2019-3820 (CVSS 4.3) — It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all context…
    CVE-2017-8288 (CVSS 8.1) — gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extension…
    CVE-2014-7300 (CVSS 7.2) — GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory co…
    CVE-2013-7221 (CVSS 4.6) — The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access t…
    CVE-2013-7220 (CVSS 4.6) — js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to exe…
    CVE-2012-4427 (CVSS 6.8) — The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and installation of arbitr…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High