Approved changes feed: RSS · Atom

cpe:2.3:a:scilab:scilab:5.2.2:*:*:*:*:*:*:*

part: a version: 5.2.2 update: *

VendorScilab (368cd539-96b2-5829-8544-273db8534746)
ProductScilab (86dc3e8a-6641-553d-96bb-d99d7de83e04)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/scilab purl2cpe 2026-06-01 10:17:43.846540
pkg:deb/ubuntu/scilab purl2cpe 2026-06-01 10:17:43.846542
pkg:github/scilab/scilab purl2cpe 2026-06-01 10:17:43.846543
pkg:rpm/opensuse/scilab purl2cpe 2026-06-01 10:17:43.846544

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3378 vulnerable 2026-06-08 04:55:14.349035 Details available
The (1) scilab, (2) scilab-cli, and (3) scilab-adv-cli scripts in Scilab 5.2.2 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Published: 2010-10-20T17:00:00.000Z
Updated: 2024-09-16T23:42:17.462Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.