CVE-2017-12608: Apache Openoffice

High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days.

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

Affected products

• Apache Openoffice: before 4.1.4 (fixed in 4.1.4)
• Debian Debian Linux: version 7.0 only; version 8.0 only

Published 2017-11-20. Last modified 2026-06-17.