CVE-2010-0395: Critical severity Debian Debian Linux vulnerability
Marc Schoenefeld found a flaw in the way OpenOffice.org 3.2.0 and earlier, enforced non-executable permission, when browsing macros, written in Python scripting language. If a local user was tricked into opening a specially-crafted OpenDocument Text (ODT) file, containing macros, and previewed the macro directories structure, it could lead to Python macro execution even when macros execution was disabled.
Other sources
OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0395?
CVE-2010-0395 is considered a medium severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2010-0395?
To fix CVE-2010-0395, update your OpenOffice.org to version 3.2.1 or later.
Who is affected by CVE-2010-0395?
CVE-2010-0395 affects users of OpenOffice.org 3.2.0 and earlier on various Linux distributions.
What type of vulnerability is CVE-2010-0395?
CVE-2010-0395 is a local privilege escalation vulnerability related to Python scripting in OpenOffice.org.
What action can attackers take using CVE-2010-0395?
Attackers can execute arbitrary code with the privileges of the user opening a malicious OpenDocument Text (ODT) file.