CVE-2010-0136: Apache Openoffice

High severity, CVSS 9.3. EPSS: 8.1% chance of exploitation in the next 30 days.

OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.

Affected products

• Apache Openoffice: version 2.0.4 only; version 2.4.1 only; version 3.1.1 only
• Canonical Ubuntu Linux: version 8.04 only; version 8.10 only; version 9.04 only; version 9.10 only
• Debian Debian Linux: version 4.0 only; version 5.0 only

Published 2010-02-16. Last modified 2026-06-16.