Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-12607

Опубликовано: 20 нояб. 2017
Источник: nvd
CVSS3: 7.8
CVSS2: 6.8
EPSS Низкий

Описание

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*
Версия до 4.1.4 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 74%
0.00841
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 8 лет назад

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 7
redhat
больше 8 лет назад

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 7.8
debian
около 8 лет назад

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and spec ...

CVSS3: 7.8
github
больше 3 лет назад

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS3: 7.8
fstec
больше 8 лет назад

Уязвимость функции PPTStyleSheet анализатора PPT-файлов офисного пакета Apache OpenOffice, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 74%
0.00841
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787