critical9.3
CVE-2010-0136
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attacke…
Impact
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Openoffice | Versions 2.0.4, 2.4.1, 3.1.1 |
| Canonical | Ubuntu Linux | Versions 8.04, 8.10, 9.04, 9.10 |
| Debian | Debian Linux | Versions 4.0, 5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html
- http://secunia.com/advisories/38695
- http://secunia.com/advisories/38921
- http://securitytracker.com/id?1023588
- http://www.debian.org/security/2010/dsa-1995
- http://www.mail-archive.com/debian-openoffice%40lists.debian.org/msg23178.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:221
- http://www.securityfocus.com/bid/38245
- http://www.ubuntu.com/usn/USN-903-1
- http://www.vupen.com/english/advisories/2010/0635
- http://www.vupen.com/english/advisories/2010/2905
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html
- http://secunia.com/advisories/38695
- http://secunia.com/advisories/38921
- http://securitytracker.com/id?1023588
- http://www.debian.org/security/2010/dsa-1995
- http://www.mail-archive.com/debian-openoffice%40lists.debian.org/msg23178.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:221
- http://www.securityfocus.com/bid/38245
- http://www.ubuntu.com/usn/USN-903-1
- http://www.vupen.com/english/advisories/2010/0635
- http://www.vupen.com/english/advisories/2010/2905