Vulnerability in Apache Openoffice
CVE-2010-0395
OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.
EPSS: 0.105 (95.3th percentile) — read the EPSS interpretation.
Affected products
- Apache Openoffice
- Canonical Ubuntu_linux — versions 10.04, 9.04, 9.10
- Debian Debian_linux — versions 5.0, 6.0
- Fedoraproject Fedora — versions 12, 11, 13
- Opensuse — versions 11.0, 11.1, 11.2
- Suse Linux_enterprise_desktop — versions 10, 11
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (vendor-advisory, x_refsource_MANDRIVA, Broken Link)
- cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA, Third Party Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Broken Link)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)
- cve@mitre.org (Patch, vdb-entry, x_refsource_VUPEN, Broken Link)
- cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Broken Link)
Frequently asked questions
- What is CVE-2010-0395?
- CVE-2010-0395 is a vulnerability in Apache Openoffice. Published 2010-06-10.
- Is CVE-2010-0395 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.