CVE-2010-0136

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 16-02-2010 08:30

Last modified: - 07-02-2022 06:04

Total changes: - 2

Description

OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:C/I:C/A:C

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Privileges required

Scope

User interaction

9.3

Base score

8.6

10.0

Exploitability score

Impact score

Verification logic

vendor=apache AND product=openoffice AND version=2.0.4

vendor=apache AND product=openoffice AND version=2.4.1

vendor=apache AND product=openoffice AND version=3.1.1

vendor=canonical AND product=ubuntu_linux AND version=8.04 AND software_edition=-

vendor=canonical AND product=ubuntu_linux AND version=8.10

vendor=canonical AND product=ubuntu_linux AND version=9.04

vendor=canonical AND product=ubuntu_linux AND version=9.10

vendor=Debian AND product=debian_linux AND version=4.0

vendor=Debian AND product=debian_linux AND version=5.0

Reference

38245-Broken Link, Third Party Advisory, VDB Entry
[debian-openoffice] 20100212 ./packages/openofficeorg/3.1.1/unstable r1866: merge 1:3.1.1-15+squeeze1-Mailing List, Third Party Advisory
1023588-Broken Link, Third Party Advisory, VDB Entry
DSA-1995-Third Party Advisory
USN-903-1-Third Party Advisory
38695-Broken Link
SUSE-SA:2010:017-Third Party Advisory
ADV-2010-0635-Broken Link
38921-Broken Link
ADV-2010-2905-Broken Link
MDVSA-2010:221-Broken Link

Keywords

CVE-2010-0136

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2010-0136

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures