CVE-2010-3450

Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary files via a .

published January 28, 2011

CVSS
—
EPSS
11%
Percentile
95.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky directory traversal vulnerability lurks in OpenOffice.org, letting attackers potentially overwrite files with a simple '..' trick! Think of it like a food critic asking the chef to swap out the ingredients without any supervision — they can sneak in something completely different and ruin the dish! If exploited, this vulnerability allows an attacker to overwrite critical files on a user's system, potentially leading to data loss or system compromise. It's like giving someone the keys to your filing cabinet and hoping they don't take anything important!

Put simply

Think of it like a food critic asking the chef to swap out the ingredients without any supervision — they can sneak in something completely different and ruin the dish! This vulnerability allows remote attackers to perform directory traversal attacks via specially crafted entries in certain file types, like XSLT JAR filters or OXT extension files, allowing unauthorized file manipulation.

What to do

If exploited, this vulnerability allows an attacker to overwrite critical files on a user's system, potentially leading to data loss or system compromise. It's like giving someone the keys to your filing cabinet and hoping they don't take anything important! To protect against this, ensure you upgrade OpenOffice.org to version 3.3 or later. Additionally, regularly audit your file permissions and usage of external files. Stay vigilant about the sources of your files! You've got this! By taking these steps, you can secure your systems and keep your data safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10731 · 95.8th percentile
Published
2011-01-28T21:13Z
EPSS history
Timeline
  • 28 JAN 21:13Z
    Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary files via a .
    cvelistv5