OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Openoffice | — | Upgrade Apache OpenOffice to the latest version | Sep 12, 2025 | Jun 10, 2010 |
| Centos_linux | — | Upgrade openoffice.org-langpack-esUpgrade openoffice.org-pyunoUpgrade openoffice.org-langpack-cy_GBUpgrade openoffice.org-langpack-st_ZAUpgrade openoffice.org-langpack-ta_INUpgrade openoffice.org-langpack-tn_ZAUpgrade openoffice.org-javafilterUpgrade openoffice.org-langpack-bnUpgrade openoffice.org-langpack-af_ZAUpgrade openoffice.org-langpack-ms_MYUpgrade openoffice.org-writerUpgrade openoffice.org-langpack-urUpgrade openoffice.org-langpack-lt_LTUpgrade openoffice.org-langpack-sk_SKUpgrade openoffice.org-baseUpgrade openoffice.org-langpack-itUpgrade openoffice.org-langpack-fi_FIUpgrade openoffice.org-langpack-gl_ESUpgrade openoffice.org-langpack-ruUpgrade openoffice.org-sdk-docUpgrade openoffice.org-langpack-kn_INUpgrade openoffice.org-langpack-et_EEUpgrade openoffice.org-langpack-svUpgrade openoffice.org-langpack-eu_ESUpgrade openoffice.org-langpack-nlUpgrade openoffice.org-langpack-nb_NOUpgrade openoffice.org-coreUpgrade openoffice.org-graphicfilterUpgrade openoffice.org-langpack-da_DKUpgrade openoffice.org-langpack-frUpgrade openoffice.org-langpack-ga_IEUpgrade openoffice.org-langpack-el_GRUpgrade openoffice.org-xsltfilterUpgrade openoffice.org-langpack-xh_ZAUpgrade openoffice.org-langpack-pt_BRUpgrade openoffice.org-mathUpgrade openoffice.org-langpack-hu_HUUpgrade openoffice.org-langpack-nr_ZAUpgrade openoffice.org-langpack-te_INUpgrade openoffice.org-langpack-pa_INUpgrade openoffice.org-langpack-bg_BGUpgrade openoffice.org-langpack-ml_INUpgrade openoffice.org-langpack-ss_ZAUpgrade openoffice.org-langpack-as_INUpgrade openoffice.org-sdkUpgrade openoffice.org-langpack-zh_TWUpgrade openoffice.org-langpack-sl_SIUpgrade openoffice.org-langpack-hr_HRUpgrade openoffice.org-langpack-he_ILUpgrade openoffice.org-langpack-th_THUpgrade openoffice.org-langpack-deUpgrade openoffice.org-langpack-nn_NOUpgrade openoffice.org-langpack-or_INUpgrade openoffice.org-ureUpgrade openoffice.org-langpack-mr_INUpgrade openoffice.org-langpack-ve_ZAUpgrade openoffice.org-langpack-gu_INUpgrade openoffice.org-langpack-arUpgrade openoffice.org-langpack-tr_TRUpgrade openoffice.org-langpack-ts_ZAUpgrade openoffice.org-langpack-zh_CNUpgrade openoffice.org-emailmergeUpgrade openoffice.org-testtoolsUpgrade openoffice.org-langpack-pt_PTUpgrade openoffice.org-langpack-zu_ZAUpgrade openoffice.org-drawUpgrade openoffice.org-langpack-cs_CZUpgrade openoffice.org-langpack-hi_INUpgrade openoffice.org-langpack-nso_ZAUpgrade openoffice.org-langpack-pl_PLUpgrade openoffice.org-langpack-ja_JPUpgrade openoffice.org-langpack-ko_KRUpgrade openoffice.org-calcUpgrade openoffice.org-impressUpgrade openoffice.org-headlessUpgrade openoffice.org-langpack-ca_ESUpgrade openoffice.org-langpack-sr_CS | Dec 1, 2016 | Jun 9, 2010 |
| Gentoo Linux | — | Upgrade app-office/openoffice.Upgrade app-office/libreoffice.Upgrade app-office/openoffice-bin.Upgrade app-office/libreoffice-bin. | Oct 30, 2017 | Jun 9, 2010 |
| Suse | — | Upgrade libreoffice-testtoolUpgrade libreoffice-l10n-prebuiltUpgrade libreoffice-calc-extensionsUpgrade libreoffice-officebeanUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-kde4Upgrade libreoffice-monoUpgrade libreoffice-drawUpgrade libreoffice-kdeUpgrade libreoffice-gnomeUpgrade libreofficeUpgrade libreoffice-mathUpgrade libreoffice-impress-extensionsUpgrade libreoffice-calcUpgrade libreoffice-draw-extensionsUpgrade libreoffice-pyunoUpgrade procpsUpgrade libreoffice-sdkUpgrade libreoffice-base-extensionsUpgrade libreoffice-writer-extensionsUpgrade libreoffice-writerUpgrade libreoffice-mailmergeUpgrade libreoffice-impressUpgrade libreoffice-filters-optionalUpgrade libreoffice-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade openoffice.org-base-core | Nov 8, 2024 | Jun 10, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub