VULNERABILITY INTELLIGENCE

CVE-2017-9806

CVSS score7.8 HIGH

EPSS probability1.80%

CISA KEVNot currently listed

Published2017-11-20

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

Weakness classification

CWE-787: Out-of-bounds Write

Primary references

security@apache.org — Vendor Advisory
security@apache.org — Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry