CVE-2017-12607

HIGH 7.8CVE-2017-12607 · Published 20/11/2017 · updated 17/06/2026

In short

CVE-2017-12607 is a HIGH (CVSS 7.8) vulnerability affecting openoffice (apache).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.3% of all vulnerabilities.
Fix: update to 4.1.4 or later.

Package	Affected versions	Patched versions
openoffice apache	`< 4.1.4`	`4.1.4`

Description

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

References

securityfocus.com/bid/101585 · Third Party Advisory
securitytracker.com/id/1039732 · Third Party Advisory
securitytracker.com/id/1039734 · Third Party Advisory
lists.debian.org/debian-lts-announce/2017/12/msg00017.html · Mailing List
debian.org/security/2017/dsa-4022 · Third Party Advisory
openoffice.org/security/cves/CVE-2017-12607.html · Vendor Advisory

More vulnerabilities in openoffice

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openoffice

apache

< 4.1.4

4.1.4

More vulnerabilities in openoffice

See all →