CVE:CVE-2010-3689
CNNVD:CNNVD-201101-403
OpenOffice.org 是一套跨平台的办公室软件套件，能在 Windows、Linux、MacOS X (X11)、和 Solaris 等操作系统上执行。
OpenOffice.org (OOo) 2.x和3.3之前的3.x版本中的soffice在LD_LIBRARY_PATH中放置了零长度的目录名。本地用户可以借助在当前工作目录中的Trojan木马共享库文件获取特权。
solution:Upgrade apache openoffice to a higher version than 3.3.0,and avoid the version [3.0.0,3.3.0); Upgrade canonical ubuntu_linux to a higher version than 8.04,9.10,10.04,10.10,and avoid the version 8.04,9.10,10.04,10.10; Upgrade debian debian_linux to a higher version than 5.0,6.0,and avoid the version 5.0,6.0