PT-2010-5641 · Apache+2 · Libuno-Cli-Ure1.0-Cil+7

Marc Schoenefeld · Published 1970-01-01 · Updated 2022-02-07 · CVE-2010-0395

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenOffice.org versions 2.x through 3.0 before 3.2.1 libuno-cli-types1.1-cil (affected versions not specified) libuno-cli-ure1.0-cil (affected versions not specified) libuno-cli-basetypes1.0-cil (affected versions not specified) libuno-cli-cppuhelper1.0-cil (affected versions not specified)

Description The issue concerns multiple vulnerabilities in various packages of the Debian GNU/Linux operating system and the OpenOffice office package. These vulnerabilities can be exploited remotely, leading to breaches of confidentiality, integrity, and availability of protected information. The vulnerabilities in OpenOffice allow remote attackers to bypass security restrictions, execute arbitrary Python code, and gain unauthorized access to sensitive data. The vulnerabilities in the libuno-cli packages are related to insufficient access control mechanisms, allowing remote attackers to access confidential data, compromise its integrity, and cause service disruptions.

Recommendations For OpenOffice.org versions 2.x through 3.0 before 3.2.1: Update to version 3.2.1 or later to resolve the issue. For libuno-cli-types1.1-cil: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For libuno-cli-ure1.0-cil: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For libuno-cli-basetypes1.0-cil: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For libuno-cli-cppuhelper1.0-cil: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2015-01944

BDU:2015-02890

BDU:2015-02891

BDU:2015-02892

BDU:2015-02893

CVE-2010-0395

DSA-2055-1

RHSA-2010:0459

RHSA-2010_0459

Affected Products

Debian

Openoffice

Openoffice.Org

Red Hat

Libuno-Cli-Basetypes1.0-Cil

Libuno-Cli-Cppuhelper1.0-Cil

Libuno-Cli-Types1.1-Cil

Libuno-Cli-Ure1.0-Cil

References · 36

• https://nvd.nist.gov/vuln/detail/CVE-2010-0395 · Security Note
• http://debian.org/security/2010/dsa-2055 · Vendor Advisory
• http://ubuntu.com/usn/usn-949-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02890 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2010:221 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02892 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042529.html · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-201408-19.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02893 · Security Note
• http://vupen.com/english/advisories/2010/1350 · Patch
• https://bdu.fstec.ru/vul/2015-01944 · Security Note
• http://openoffice.org/security/cves/CVE-2010-0395.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02891 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2010-0395 · Vendor Advisory