CVE-2017-12608 is a high-severity vulnerability affecting Apache OpenOffice Writer before version 4.1.4, specifically within its DOC file parser. Attackers can exploit this by crafting malicious documents, leading to memory corruption and application crashes, with a potential for arbitrary code execution. The vulnerability has a CVSS score of 7.8, indicating a high impact on confidentiality, integrity, and availability, requiring user interaction to trigger. While no public exploit code or active exploitation has been observed, there is some community discussion and media coverage surrounding this flaw.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.1.4CPE matchmatch criteria | cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
libreoffice: Out-of-bounds write in the WW8RStyle::ImportOldFormatStyles functionality
Oct 26, 2017Out-of-Bounds Write in Writer's ImportOldFormatStyles
Out-of-Bounds Write in Writer's ImportOldFormatStyles
Out-of-Bounds Write in Writer's ImportOldFormatStyles
Out-of-Bounds Write in Writer's ImportOldFormatStyles
Out-of-Bounds Write in Writer's ImportOldFormatStyles
Out-of-Bounds Write in Writer's ImportOldFormatStyles