CVE-2010-3374

Qt Creator before 2.0.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows...

6.9 MediumFix available

Qt Creator before 2.0.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Exploit likelihood

0.35%Down 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

Qt Creator before 2.0.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record: CVE-2010-3374
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Qt Creator before 2.0.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record: CVE-2010-3374
Updated: 2026-11-02

EUVDEUVD-2010-3372 No score

Qt Creator before 2.0.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record: EUVD-2010-3372
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5fqp-r764-mgx8 No score

Qt Creator before 2.0.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows...

Qt Creator before 2.0.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record: GHSA-5fqp-r764-mgx8
Updated: 2026-11-02

OSV No score

Qt Creator before 2.0.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record: CVE-2010-3374
Updated: 2026-11-02

OSVDEBIAN-CVE-2010-3374 No score

Qt Creator before 2.0.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Record: DEBIAN-CVE-2010-3374
Updated: 2026-11-02

Affected products

nokia qt creator

Affected packages

Affected packages
Package	Affected	Fixed
`qtcreator` Debian:12	before 1.3.1-3	1.3.1-3
`qtcreator` Debian:13	before 1.3.1-3	1.3.1-3
`qtcreator` Debian:14	before 1.3.1-3	1.3.1-3

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-3374 is a medium vulnerability (CVSS 6.9) in Nokia Qt Creator, published October 4, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. Fixed in qtcreator 1.3.1-3.

Exploit likelihood

What each source reports

Affected products

Affected packages

History

In short

References