← Database

CVE-2010-1254

MEDIUM CVSS: 6.9 Published: 2010-06-08 Modified: 2026-06-16

Description

The installation for Microsoft Open XML File Format Converter for Mac sets insecure ACLs for the /Applications folder, which allows local users to execute arbitrary code by replacing the executable with a Trojan Horse, aka "Mac Office Open XML Permissions Vulnerability."

Affected Platforms

Microsoft Open Xml File Format Converter

Weakness Type

CWE-264

References