CVE-2010-0136

OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.

• CWE-77

• http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.htmlThird Party Advisory
• http://secunia.com/advisories/38695Broken Link
• http://secunia.com/advisories/38921Broken Link
• http://securitytracker.com/id?1023588Broken Link, Third Party Advisory, VDB Entry
• http://www.debian.org/security/2010/dsa-1995Third Party Advisory
• http://www.mail-archive.com/debian-openoffice%40lists.debian.org/msg23178.html
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:221Broken Link
• http://www.securityfocus.com/bid/38245Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-903-1Third Party Advisory
• http://www.vupen.com/english/advisories/2010/0635Broken Link
• http://www.vupen.com/english/advisories/2010/2905Broken Link
• http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.htmlThird Party Advisory
• http://secunia.com/advisories/38695Broken Link
• http://secunia.com/advisories/38921Broken Link
• http://securitytracker.com/id?1023588Broken Link, Third Party Advisory, VDB Entry
• http://www.debian.org/security/2010/dsa-1995Third Party Advisory
• http://www.mail-archive.com/debian-openoffice%40lists.debian.org/msg23178.html
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:221Broken Link
• http://www.securityfocus.com/bid/38245Broken Link, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-903-1Third Party Advisory
• http://www.vupen.com/english/advisories/2010/0635Broken Link
• http://www.vupen.com/english/advisories/2010/2905Broken Link

Published

Feb 16, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0130Integer overflow in Adobe Shockwave Player before 11.5.7.609…8.8
• CVE-2010-0131Stack-based buffer overflow in the SpreadSheet Lotus 123 rea…
• CVE-2010-0132Cross-site scripting (XSS) vulnerability in ViewVC 1.1 befor…
• CVE-2010-0133Multiple stack-based buffer overflows in the SpreadSheet Lot…
• CVE-2010-0134Integer signedness error in rtfsr.dll in Autonomy KeyView 10…
• CVE-2010-0135Heap-based buffer overflow in the WordPerfect 5.x reader (wo…
• CVE-2010-0137Unspecified vulnerability in the sshd_child_handler process …
• CVE-2010-0138Buffer overflow in Cisco CiscoWorks Internetwork Performance…
• CVE-2010-0139Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 be…
• CVE-2010-0140Multiple unspecified vulnerabilities in the web server in Ci…
• CVE-2010-0141MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and …
• CVE-2010-0142MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and …