CVE-2010-0395
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 10%
exploitation probability
10%top 4% of all CVEs
observed exploitation
nono source reports it
OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.
Affected products
n/a · n/aReferences
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042468.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-June/042529.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-June/042534.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=574119http://secunia.com/advisories/40070http://secunia.com/advisories/40084http://secunia.com/advisories/40104http://secunia.com/advisories/40107http://secunia.com/advisories/41818http://secunia.com/advisories/60799https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11091