CVE-2010-0136

Publication date 16 February 2010

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.

Status

Package Ubuntu Release Status
openoffice.org 9.10 karmic
Fixed in 1:3.1.1-5ubuntu1.1
9.04 jaunty
Fixed in 1:3.0.1-9ubuntu3.2
8.10 intrepid
Fixed in 1:2.4.1-11ubuntu2.3
8.04 LTS hardy
Fixed in 1:2.4.1-1ubuntu2.3
6.06 LTS dapper Ignored end of life

References

Related Ubuntu Security Notices (USN)

    • USN-903-1
    • OpenOffice.org vulnerabilities
    • 24 February 2010

Other references

Access our resources on patching vulnerabilities