CVE-2010-0395

Published: Jun 10, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.

Affected (15)

Products: Canonical: Ubuntu Linux · Debian: Debian Linux · Fedoraproject: Fedora · +3 more

Show all products

Canonical: Ubuntu Linux · Debian: Debian Linux · Fedoraproject: Fedora · Opensuse: Opensuse · Suse: Linux Enterprise Desktop · Apache: Openoffice

1 product

1 product

1 product

1 product

1 product

Linux Enterprise Desktop

Apache

1 product

Openoffice

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 9.04
Canonical Ubuntu Linux	Version 9.10
Debian Debian Linux	Version 5.0
Debian Debian Linux	Version 6.0
Fedoraproject Fedora	Version 11
Fedoraproject Fedora	Version 12
Fedoraproject Fedora	Version 13
Opensuse Opensuse	Version 11.0
Opensuse Opensuse	Version 11.1
Opensuse Opensuse	Version 11.2
Suse Linux Enterprise Desktop	Version 10 sp3
Suse Linux Enterprise Desktop	Version 11

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Apache Openoffice	From 2.0.0 to 3.2.1

References (50)

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042468.html

Source: cve@mitre.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042529.html

Source: cve@mitre.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042534.html

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/40070

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/40084

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/40104

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/40107

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/41818

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/60799

Source: cve@mitre.org

Broken Link

http://ubuntu.com/usn/usn-949-1

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2010/dsa-2055

Source: cve@mitre.org

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2010:221

Source: cve@mitre.org

Broken Link

http://www.openoffice.org/security/cves/CVE-2010-0395.html

Source: cve@mitre.org

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2010-0459.html

Source: cve@mitre.org

Broken Link

http://www.us-cert.gov/cas/techalerts/TA10-287A.html

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2010/1350

Source: cve@mitre.org

Broken LinkPatch

http://www.vupen.com/english/advisories/2010/1353

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2010/1366

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2010/1369

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2010/2905

Source: cve@mitre.org

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=574119

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11091

Source: cve@mitre.org

Tool Signature

http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042468.html