Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-12608

Опубликовано: 20 нояб. 2017
Источник: debian
EPSS Низкий

Описание

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libreofficefixed1:5.0.2-1package

Примечания

  • https://www.talosintelligence.com/reports/TALOS-2017-0301

  • https://www.libreoffice.org/about-us/security/advisories/CVE-2017-12608

  • https://gerrit.libreoffice.org/gitweb?p=core.git;a=commitdiff_plain;h=42a709d1ef647aab9a1c9422b4e25ecaee857aba

EPSS

Процентиль: 86%
0.02889
Низкий

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 8 лет назад

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 7
redhat
почти 9 лет назад

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 7.8
nvd
больше 8 лет назад

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 7.8
github
больше 4 лет назад

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 8.8
fstec
почти 9 лет назад

Уязвимость функции ImportOldFormatStyles анализатора DOC-файлов офисного пакета Apache OpenOffice, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 86%
0.02889
Низкий