CVE-2010-0136
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for...
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.
Exploit likelihood
What each source reports
NVD Score used
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.
- Record
CVE-2010-0136- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-77
- Updated
- 2026-11-02
CVE List No score
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.
- Record
CVE-2010-0136- Updated
- 2026-11-02
EUVDEUVD-2010-0168 No score
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.
- Record
EUVD-2010-0168- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4g9j-hp5m-7j2p No score
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for...
OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.
- Record
GHSA-4g9j-hp5m-7j2p- Weakness
- CWE-77
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openoffice.orgDebian:4.0 From an advisory covering 6 CVEs |
before 2.0.4.dfsg.2-7etch9, plus listed versions 2.0.4.dfsg.2-5etch12.0.4.dfsg.2-5etch22.0.4.dfsg.2-62.0.4.dfsg.2-72.0.4.dfsg.2-7etch1 Show 6 moreShow less2.0.4.dfsg.2-7etch22.0.4.dfsg.2-7etch42.0.4.dfsg.2-7etch52.0.4.dfsg.2-7etch62.0.4.dfsg.2-7etch72.0.4.dfsg.2-7etch8 |
2.0.4.dfsg.2-7etch9 |
openoffice.orgDebian:5.0 From an advisory covering 6 CVEs |
before 1:2.4.1+dfsg-1+lenny6, plus listed versions 1:2.4.1+dfsg-11:2.4.1+dfsg-1+lenny11:2.4.1+dfsg-1+lenny31:2.4.1+dfsg-1+lenny41:2.4.1+dfsg-1+lenny51:2.4.1-17 |
1:2.4.1+dfsg-1+lenny6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0136 is a high vulnerability (CVSS 9.3) in Apache Openoffice, published February 12, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.10%, the 94th percentile. No source names a fixed version.
References
mandriva.com/security/advisories?name=MDVSA-2010:221
secunia.com/advisories/38695
debian.org/security/2010/dsa-1995
securitytracker.com/id?1023588
ubuntu.com/usn/USN-903-1
lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html
Show 8 moreShow less
mail-archive.com/debian-openoffice%40lists.debian.org/msg23178.html
vupen.com/english/advisories/2010/0635
securityfocus.com/bid/38245
nvd.nist.gov/vuln/detail/CVE-2010-0136
github.com/advisories/GHSA-4g9j-hp5m-7j2p