{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36599?format=json","vulnerability_id":"VCID-bmss-ye5g-uyg6","summary":"Multiple vulnerabilities have been found in OpenOffice and\n    LibreOffice, the worst of which may result in execution of arbitrary code.","aliases":[{"alias":"CVE-2010-4643"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/74512?format=json","purl":"pkg:ebuild/app-office/libreoffice@3.5.5.3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-office/libreoffice@3.5.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/74513?format=json","purl":"pkg:ebuild/app-office/libreoffice@4.2.5.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-office/libreoffice@4.2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/74514?format=json","purl":"pkg:ebuild/app-office/libreoffice-bin@3.5.5.3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-office/libreoffice-bin@3.5.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/74515?format=json","purl":"pkg:ebuild/app-office/libreoffice-bin@4.2.5.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-office/libreoffice-bin@4.2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/74511?format=json","purl":"pkg:ebuild/app-office/openoffice@3.5.5.3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-office/openoffice@3.5.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/74510?format=json","purl":"pkg:ebuild/app-office/openoffice-bin@3.5.5.3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-office/openoffice-bin@3.5.5.3"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/127398?format=json","purl":"pkg:rpm/redhat/openoffice.org@1.1.5-10.7.el4_8?arch=10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bbbr-npq9-dygv"},{"vulnerability":"VCID-bmss-ye5g-uyg6"},{"vulnerability":"VCID-cycq-ww86-dudc"},{"vulnerability":"VCID-d2x8-7y2w-fbfz"},{"vulnerability":"VCID-k7e6-hzd3-xqe2"},{"vulnerability":"VCID-zq51-c9sn-nbgp"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openoffice.org@1.1.5-10.7.el4_8%3Farch=10"},{"url":"http://public2.vulnerablecode.io/api/packages/127399?format=json","purl":"pkg:rpm/redhat/openoffice.org@1:3.1.1-19.5.el5_5?arch=6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-41rm-zbnv-j7h1"},{"vulnerability":"VCID-bbbr-npq9-dygv"},{"vulnerability":"VCID-bc7y-aa5v-93ev"},{"vulnerability":"VCID-bmss-ye5g-uyg6"},{"vulnerability":"VCID-cycq-ww86-dudc"},{"vulnerability":"VCID-d2x8-7y2w-fbfz"},{"vulnerability":"VCID-k7e6-hzd3-xqe2"},{"vulnerability":"VCID-zq51-c9sn-nbgp"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openoffice.org@1:3.1.1-19.5.el5_5%3Farch=6"},{"url":"http://public2.vulnerablecode.io/api/packages/127397?format=json","purl":"pkg:rpm/redhat/openoffice.org@1:3.2.1-19.6.el6_0?arch=5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-41rm-zbnv-j7h1"},{"vulnerability":"VCID-bbbr-npq9-dygv"},{"vulnerability":"VCID-bc7y-aa5v-93ev"},{"vulnerability":"VCID-bmss-ye5g-uyg6"},{"vulnerability":"VCID-cycq-ww86-dudc"},{"vulnerability":"VCID-d2x8-7y2w-fbfz"},{"vulnerability":"VCID-k7e6-hzd3-xqe2"},{"vulnerability":"VCID-zq51-c9sn-nbgp"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openoffice.org@1:3.2.1-19.6.el6_0%3Farch=5"},{"url":"http://public2.vulnerablecode.io/api/packages/127396?format=json","purl":"pkg:rpm/redhat/openoffice.org2@1:2.0.4-5.7.0.6.1.el4_8?arch=8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bbbr-npq9-dygv"},{"vulnerability":"VCID-bmss-ye5g-uyg6"},{"vulnerability":"VCID-cycq-ww86-dudc"},{"vulnerability":"VCID-d2x8-7y2w-fbfz"},{"vulnerability":"VCID-k7e6-hzd3-xqe2"},{"vulnerability":"VCID-zq51-c9sn-nbgp"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openoffice.org2@1:2.0.4-5.7.0.6.1.el4_8%3Farch=8"}],"references":[{"reference_url":"http://osvdb.org/70718","reference_id":"","reference_type":"","scores":[],"url":"http://osvdb.org/70718"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4643.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-4643.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2010-4643","reference_id":"","reference_type":"","scores":[{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88748","published_at":"2026-05-05T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88653","published_at":"2026-04-01T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88662","published_at":"2026-04-02T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88678","published_at":"2026-04-04T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88679","published_at":"2026-04-07T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88696","published_at":"2026-04-08T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88702","published_at":"2026-04-09T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88714","published_at":"2026-04-11T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88708","published_at":"2026-04-13T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88721","published_at":"2026-04-16T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88719","published_at":"2026-04-18T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88717","published_at":"2026-04-21T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88732","published_at":"2026-04-24T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88738","published_at":"2026-04-26T12:55:00Z"},{"value":"0.04181","scoring_system":"epss","scoring_elements":"0.88737","published_at":"2026-04-29T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2010-4643"},{"reference_url":"http://secunia.com/advisories/40775","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/40775"},{"reference_url":"http://secunia.com/advisories/42999","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/42999"},{"reference_url":"http://secunia.com/advisories/43065","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/43065"},{"reference_url":"http://secunia.com/advisories/43105","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/43105"},{"reference_url":"http://secunia.com/advisories/43118","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/43118"},{"reference_url":"http://secunia.com/advisories/60799","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/60799"},{"reference_url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65441","reference_id":"","reference_type":"","scores":[],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65441"},{"reference_url":"http://ubuntu.com/usn/usn-1056-1","reference_id":"","reference_type":"","scores":[],"url":"http://ubuntu.com/usn/usn-1056-1"},{"reference_url":"http://www.debian.org/security/2011/dsa-2151","reference_id":"","reference_type":"","scores":[],"url":"http://www.debian.org/security/2011/dsa-2151"},{"reference_url":"http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml","reference_id":"","reference_type":"","scores":[],"url":"http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml"},{"reference_url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:027","reference_id":"","reference_type":"","scores":[],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:027"},{"reference_url":"http://www.openoffice.org/security/cves/CVE-2010-4643.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.openoffice.org/security/cves/CVE-2010-4643.html"},{"reference_url":"http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html"},{"reference_url":"http://www.redhat.com/support/errata/RHSA-2011-0181.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.redhat.com/support/errata/RHSA-2011-0181.html"},{"reference_url":"http://www.redhat.com/support/errata/RHSA-2011-0182.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.redhat.com/support/errata/RHSA-2011-0182.html"},{"reference_url":"http://www.securityfocus.com/bid/46031","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/46031"},{"reference_url":"http://www.securitytracker.com/id?1025002","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id?1025002"},{"reference_url":"http://www.vupen.com/english/advisories/2011/0230","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2011/0230"},{"reference_url":"http://www.vupen.com/english/advisories/2011/0232","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2011/0232"},{"reference_url":"http://www.vupen.com/english/advisories/2011/0279","reference_id":"","reference_type":"","scores":[],"url":"http://www.vupen.com/english/advisories/2011/0279"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=667588","reference_id":"667588","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=667588"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4643","reference_id":"CVE-2010-4643","reference_type":"","scores":[{"value":"9.3","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:M/Au:N/C:C/I:C/A:C"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4643"},{"reference_url":"https://security.gentoo.org/glsa/201408-19","reference_id":"GLSA-201408-19","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201408-19"},{"reference_url":"https://access.redhat.com/errata/RHSA-2011:0181","reference_id":"RHSA-2011:0181","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2011:0181"},{"reference_url":"https://access.redhat.com/errata/RHSA-2011:0182","reference_id":"RHSA-2011:0182","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2011:0182"},{"reference_url":"https://access.redhat.com/errata/RHSA-2011:0183","reference_id":"RHSA-2011:0183","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2011:0183"},{"reference_url":"https://usn.ubuntu.com/1056-1/","reference_id":"USN-1056-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/1056-1/"}],"weaknesses":[{"cwe_id":122,"name":"Heap-based Buffer Overflow","description":"A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc()."},{"cwe_id":787,"name":"Out-of-bounds Write","description":"The product writes data past the end, or before the beginning, of the intended buffer."}],"exploits":[],"severity_range_score":"9.3 - 9.3","exploitability":"0.5","weighted_severity":"8.4","risk_score":4.2,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bmss-ye5g-uyg6"}