CVE-2010-0136 OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted....
HighCVSS 9.3
EPSS 8.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache openoffice | = 2.0.4 | No fix listed |
| apache openoffice | = 2.4.1 | No fix listed |
| apache openoffice | = 3.1.1 | No fix listed |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
| Canonical Ubuntu Linux | = 8.10 | No fix listed |
| Canonical Ubuntu Linux | = 9.04 | No fix listed |
| Canonical Ubuntu Linux | = 9.10 | No fix listed |
| debian linux | = 4.0 | No fix listed |
| debian linux | = 5.0 | No fix listed |
References
- SUSE-SA:2010:017 third-party-advisory vendor-advisory
- 38695 broken-link third-party-advisory
- 38921 broken-link third-party-advisory
- 1023588 broken-link third-party-advisory vdb-entry
- DSA-1995 third-party-advisory vendor-advisory
- [debian-openoffice] 20100212 ./packages/openofficeorg/3.1.1/unstable r1866: merge 1:3.1.1-15+squeeze1 mailing-list
- MDVSA-2010:221 broken-link vendor-advisory
- 38245 broken-link third-party-advisory vdb-entry
- USN-903-1 third-party-advisory vendor-advisory
- ADV-2010-0635 broken-link vdb-entry
- ADV-2010-2905 broken-link vdb-entry