VULNERABILITY INTELLIGENCE

CVE-2010-1254

CVSS score6.9 MEDIUM
EPSS probability1.43%
CISA KEVNot currently listed
Published2010-06-08
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

The installation for Microsoft Open XML File Format Converter for Mac sets insecure ACLs for the /Applications folder, which allows local users to execute arbitrary code by replacing the executable with a Trojan Horse, aka "Mac Office Open XML Permissions Vulnerability."

Primary references