CVE-2010-0136

Published: Feb 16, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.

Affected (9)

Products: Apache: Openoffice · Canonical: Ubuntu Linux · Debian: Debian Linux

1 product

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apache Openoffice	Version 2.0.4
Apache Openoffice	Version 2.4.1
Apache Openoffice	Version 3.1.1

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 8.10
Canonical Ubuntu Linux	Version 9.04
Canonical Ubuntu Linux	Version 9.10
Debian Debian Linux	Version 4.0
Debian Debian Linux	Version 5.0

Related CWEs

Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (22)

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/38695

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/38921

Source: cve@mitre.org

Broken Link

http://securitytracker.com/id?1023588

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.debian.org/security/2010/dsa-1995

Source: cve@mitre.org

Third Party Advisory

http://www.mail-archive.com/debian-openoffice%40lists.debian.org/msg23178.html

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2010:221

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/38245

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-903-1

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2010/0635

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2010/2905

Source: cve@mitre.org

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/38695

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/38921

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://securitytracker.com/id?1023588

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.debian.org/security/2010/dsa-1995

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.mail-archive.com/debian-openoffice%40lists.debian.org/msg23178.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2010:221

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/38245

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-903-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.vupen.com/english/advisories/2010/0635

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.vupen.com/english/advisories/2010/2905

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.