CVE-2017-12608

—

CVSS 3.1

7.8 high

EPSS

3%p86

Published

Nov 20, 2017 (Nov 20, 2017)

Modified

Jun 17, 2026

Description

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

Vendors: apache debian
Products: openoffice, debian linux
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.9%)

In the news1 stories

Vulnerability Spotlight: Apache OpenOffice Vulnerabilities

Cisco TalosOct 26, 14:26 UTC · Oct 26, 2017Vulnerability in the wildCVE-2017-9806 CVE-2017-12607 CVE-2017-12608