NetSight
IP …
critical9.3

CVE-2010-0395

OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code vi…

Impact

OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 8.04, 9.04, 9.10, 10.04
DebianDebian Linux
Versions 5.0, 6.0
FedoraprojectFedora
Versions 11, 12, 13
OpensuseOpensuse
Versions 11.0, 11.1, 11.2
SuseLinux Enterprise Desktop
Versions 10, 11
ApacheOpenoffice
from 2.0.0 before 3.2.1

References