CVE-2010-3450

Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary files via a .. (dot dot) in an entry in (1) an XSLT JAR filter description file, (2) an Extension (aka OXT) file, or unspecified other (3) JAR or (4) ZIP files.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
apacheopenoffice
2.0.0 ≤
𝑥
< 3.3.0
canonicalubuntu_linux
8.04
canonicalubuntu_linux
9.10
canonicalubuntu_linux
10.04
canonicalubuntu_linux
10.10
debiandebian_linux
5.0
debiandebian_linux
6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libreoffice
dapper
dne
hardy
dne
karmic
dne
lucid
dne
maverick
dne
openoffice.org
dapper
ignored
hardy
Fixed 1:2.4.1-1ubuntu2.5
released
karmic
Fixed 1:3.1.1-5ubuntu1.3
released
lucid
Fixed 1:3.2.0-7ubuntu4.2
released
maverick
Fixed 1:3.2.1-7ubuntu1.1
released
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
autocorr-af
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-bg
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-cs
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-da
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-de
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-en
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-es
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-eu
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-fa
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-fi
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-fr
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-ga
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-hu
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-it
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-ja
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-ko
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-lb
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-lt
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-mn
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-nl
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-pl
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-pt
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-ru
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-sk
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-sl
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-sv
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-tr
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-vi
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
autocorr-zh
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
broffice.org-base
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
broffice.org-brand
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
broffice.org-calc
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
broffice.org-draw
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
broffice.org-impress
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
broffice.org-math
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
broffice.org-writer
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-base
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-base-core
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-brand
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-bsh
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-calc
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-calc-core
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-core
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-devel
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-draw
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-draw-core
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-emailmerge
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-graphicfilter
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-headless
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-impress
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-impress-core
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-javafilter
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-af
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ar
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-as
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-bg
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-bn
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ca
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-cs
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-cy
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-da
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-de
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-dz
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-el
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-en
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-es
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-et
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-eu
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-fi
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-fr
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ga
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-gl
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-gu
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-he
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-hi
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-hr
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-hu
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-it
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ja
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-kn
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ko
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-lt
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-mai
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ml
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-mr
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ms
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-nb
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-nl
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-nn
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-nr
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-nso
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-or
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-pa
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-pl
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-pt
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ro
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ru
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-sk
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-sl
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-sr
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ss
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-st
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-sv
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ta
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-te
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-th
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-tn
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-tr
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ts
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-uk
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ur
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-ve
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-xh
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-zh
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-langpack-zu
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-math
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-math-core
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-ogltrans
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-opensymbol-fonts
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-pdfimport
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-presentation-minimizer
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-presenter-screen
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-pyuno
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-report-builder
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-rhino
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-sdk
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-sdk-doc
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-testtools
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-ure
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-wiki-publisher
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-writer
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-writer-core
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
openoffice.org-xsltfilter
RHEL 6
1:3.2.1-19.6.el6_0.5
fixed
Common Weakness Enumeration
References
http://osvdb.org/70711
http://secunia.com/advisories/40775
http://secunia.com/advisories/42999
http://secunia.com/advisories/43065
http://secunia.com/advisories/43105
http://secunia.com/advisories/43118
http://secunia.com/advisories/60799
http://ubuntu.com/usn/usn-1056-1
http://www.debian.org/security/2011/dsa-2151
http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2011:027
http://www.openoffice.org/security/cves/CVE-2010-3450.html
http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
http://www.redhat.com/support/errata/RHSA-2011-0181.html
http://www.redhat.com/support/errata/RHSA-2011-0182.html
http://www.securityfocus.com/bid/46031
http://www.securitytracker.com/id?1025002
http://www.vupen.com/english/advisories/2011/0230
http://www.vupen.com/english/advisories/2011/0232
http://www.vupen.com/english/advisories/2011/0279
https://bugzilla.redhat.com/show_bug.cgi?id=602324
http://osvdb.org/70711
http://secunia.com/advisories/40775
http://secunia.com/advisories/42999
http://secunia.com/advisories/43065
http://secunia.com/advisories/43105
http://secunia.com/advisories/43118
http://secunia.com/advisories/60799
http://ubuntu.com/usn/usn-1056-1
http://www.debian.org/security/2011/dsa-2151
http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2011:027
http://www.openoffice.org/security/cves/CVE-2010-3450.html
http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
http://www.redhat.com/support/errata/RHSA-2011-0181.html
http://www.redhat.com/support/errata/RHSA-2011-0182.html
http://www.securityfocus.com/bid/46031
http://www.securitytracker.com/id?1025002
http://www.vupen.com/english/advisories/2011/0230
http://www.vupen.com/english/advisories/2011/0232
http://www.vupen.com/english/advisories/2011/0279
https://bugzilla.redhat.com/show_bug.cgi?id=602324