VDB
CVE-2010-0136
CVE-2010-0136
PUBLISHED
CVSS 9.300000190734863 CRITICAL
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.
EPSS 8.10% · 94.7th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
8.10%
94.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| debian | debian_linux | 5.0, 4.0 |
| canonical | ubuntu_linux | 8.10, 8.04, 9.04 |
| apache | openoffice | 3.1.1, 2.4.1, 2.0.4 |
Timeline
- Feb 16, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Feb 8, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
References
- USN-903-1 vendor-advisory
- SUSE-SA:2010:017 vendor-advisory
- ADV-2010-0635 vdb
- 38695 third-party-advisory
- [debian-openoffice] 20100212 ./packages/openofficeorg/3.1.1/unstable r1866: merge 1:3.1.1-15+squeeze1 mailing-list
- 38245 vdb
- http://secunia.com/advisories/38921 technical
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:221 technical
- http://www.vupen.com/english/advisories/2010/2905 technical
- https://nvd.nist.gov/vuln/detail/CVE-2010-0136 advisory
- http://securitytracker.com/id?1023588 url
- http://www.debian.org/security/2010/dsa-1995 url
- http://www.mail-archive.com/debian-openoffice@lists.debian.org/msg23178.html url