CVE-2010-0395: Apache Openoffice

High severity, CVSS 9.3. EPSS: 10.5% chance of exploitation in the next 30 days.

OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.

Affected products

• Apache Openoffice: from 2.0.0, before 3.2.1 (fixed in 3.2.1)
• Canonical Ubuntu Linux: version 8.04 only; version 9.04 only; version 9.10 only; version 10.04 only
• Debian Debian Linux: version 5.0 only; version 6.0 only
• Fedoraproject Fedora: version 11 only; version 12 only; version 13 only
• Opensuse Opensuse: version 11.0 only; version 11.1 only; version 11.2 only
• Suse Linux Enterprise Desktop: version 10 only; version 11 only

Published 2010-06-10. Last modified 2026-06-16.