CVE-2017-9806

Published: Nov 20, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

Affected (1)

Products: Apache: Openoffice

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Openoffice	Before 4.1.4

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

http://www.openoffice.org/security/cves/CVE-2017-9806.html

Source: security@apache.org

Vendor Advisory

http://www.securityfocus.com/bid/101585

Source: security@apache.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.openoffice.org/security/cves/CVE-2017-9806.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/101585

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

Timeline

No history available yet.