CVE-2017-12607: Apache Openoffice

High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days.

A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

Affected products

• Apache Openoffice: before 4.1.4 (fixed in 4.1.4)
• Debian Debian Linux: version 7.0 only; version 8.0 only

Published 2017-11-20. Last modified 2026-06-17.