{"id":"CVE-2017-12607","aliases":["DEBIAN-CVE-2017-12607","DLA-1214-1","DSA-4022-1","EUVD-2017-4168","GHSA-c68g-xg99-c8q7","UBUNTU-CVE-2017-12607","USN-3472-1"],"status":"published","title":"A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet,...","description":"A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02588,"percentile":0.85373,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2017-11-01T00:00:00Z","modified":"2026-09-01T20:03:42Z","fixes":[{"ecosystem":"Debian:12","package":"libreoffice","fixed_in":["1:5.0.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libreoffice","fixed_in":["1:5.0.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libreoffice","fixed_in":["1:5.0.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libreoffice","fixed_in":["1:4.2.8-0ubuntu5.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.0.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.0.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.0.2-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.4+dfsg2-0+deb7u10"}]}],"versions":["1:3.5.4+dfsg-4","1:3.5.4+dfsg2-0+deb7u1","1:3.5.4+dfsg2-0+deb7u2","1:3.5.4+dfsg2-0+deb7u3","1:3.5.4+dfsg2-0+deb7u4","1:3.5.4+dfsg2-0+deb7u4~bpo60+1","1:3.5.4+dfsg2-0+deb7u5","1:3.5.4+dfsg2-0+deb7u6","1:3.5.4+dfsg2-0+deb7u7","1:3.5.4+dfsg2-0+deb7u8","1:3.5.4+dfsg2-0+deb7u9"],"bundled":2},{"source":"osv","ecosystem":"Debian:8","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.3.3-2+deb8u9"}]}],"versions":["1:4.3.3-2","1:4.3.3-2+deb8u1","1:4.3.3-2+deb8u1~bpo70+1","1:4.3.3-2+deb8u2","1:4.3.3-2+deb8u3","1:4.3.3-2+deb8u3~bpo70+1","1:4.3.3-2+deb8u4","1:4.3.3-2+deb8u5","1:4.3.3-2+deb8u6","1:4.3.3-2+deb8u6~bpo70+1","1:4.3.3-2+deb8u7","1:4.3.3-2+deb8u7~bpo70+1","1:4.3.3-2+deb8u8"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.8-0ubuntu5.2"}]}],"versions":["1:4.1.2~rc3-0ubuntu1","1:4.1.2~rc3-0ubuntu2","1:4.1.3-0ubuntu2","1:4.1.3-0ubuntu3","1:4.2.0~rc4-0ubuntu1","1:4.2.0-0ubuntu1","1:4.2.1-0ubuntu1","1:4.2.3~rc2-0ubuntu1","1:4.2.3~rc3-0ubuntu1","1:4.2.3~rc3-0ubuntu2","1:4.2.4-0ubuntu2","1:4.2.6.3-0ubuntu1","1:4.2.7-0ubuntu1","1:4.2.7-0ubuntu2","1:4.2.8-0ubuntu2","1:4.2.8-0ubuntu3","1:4.2.8-0ubuntu4","1:4.2.8-0ubuntu5","1:4.2.8-0ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libreoffice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.8-0ubuntu5.2"}]}],"versions":["1:4.1.2~rc3-0ubuntu1","1:4.1.2~rc3-0ubuntu2","1:4.1.3-0ubuntu2","1:4.1.3-0ubuntu3","1:4.2.0~rc4-0ubuntu1","1:4.2.0-0ubuntu1","1:4.2.1-0ubuntu1","1:4.2.3~rc2-0ubuntu1","1:4.2.3~rc3-0ubuntu1","1:4.2.3~rc3-0ubuntu2","1:4.2.4-0ubuntu2","1:4.2.6.3-0ubuntu1","1:4.2.7-0ubuntu1","1:4.2.7-0ubuntu2","1:4.2.8-0ubuntu2","1:4.2.8-0ubuntu3","1:4.2.8-0ubuntu4","1:4.2.8-0ubuntu5","1:4.2.8-0ubuntu5.1"],"bundled":2}],"products":[{"vendor":"apache","product":"openoffice"},{"vendor":"apache software foundation","product":"apache openoffice"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://www.debian.org/security/2017/dsa-4022","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.openoffice.org/security/cves/CVE-2017-12607.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/101585","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2017/12/msg00017.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1039734","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securitytracker.com/id/1039732","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12607"},{"url":"https://github.com/advisories/GHSA-c68g-xg99-c8q7"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-12607","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-12607","tags":["report"]},{"url":"https://www.talosintelligence.com/reports/TALOS-2017-0300","tags":["report"]},{"url":"https://www.libreoffice.org/about-us/security/advisories/CVE-2017-12607","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3472-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-12608","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-12607","description":"A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.","status":"published","published":"2017-11-20T19:00:00Z","modified":"2024-09-16T19:11:04.058Z","updated_at":"2026-11-02T14:33:17.264801Z"}],"euvd":[{"id":"EUVD-2017-4168","description":"A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.","status":"published","published":"2017-11-20T19:00:00Z","modified":"2024-09-16T19:11:04Z","updated_at":"2026-11-03T00:55:25.259735Z"}],"ghsa":[{"id":"GHSA-c68g-xg99-c8q7","title":"A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet,...","description":"A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.","status":"published","published":"2022-05-13T01:03:57Z","modified":"2023-02-01T05:02:48Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:49:58.498747Z"}],"nvd":[{"id":"CVE-2017-12607","description":"A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.","status":"published","published":"2017-11-20T19:29:00.25Z","modified":"2026-06-17T01:03:36.77Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:04:09.7374Z"}],"osv":[{"id":"CVE-2017-12607","description":"A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.","status":"published","published":"2017-11-20T19:29:00.25Z","modified":"2026-03-15T14:24:30.318471Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:04.159616Z"},{"id":"DEBIAN-CVE-2017-12607","description":"A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.","status":"published","published":"2017-11-20T19:29:00.25Z","modified":"2026-09-01T20:03:42.228569044Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.50097Z"},{"id":"UBUNTU-CVE-2017-12607","description":"A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.","status":"published","published":"2017-11-01T00:00:00Z","modified":"2026-04-22T11:14:39.548662Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.122973Z"},{"id":"DLA-1214-1","title":"libreoffice - security update","status":"published","published":"2017-12-20T00:00:00Z","modified":"2026-03-09T01:00:44.311896Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4022-1","title":"libreoffice - security update","status":"published","published":"2017-11-07T00:00:00Z","modified":"2026-03-09T01:20:04.015011Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"USN-3472-1","title":"libreoffice vulnerabilities","description":"Marcin Noga discovered that LibreOffice incorrectly handled PPT documents.\nIf a user were tricked into opening a specially crafted PPT document, a\nremote attacker could cause LibreOffice to crash, and possibly execute\narbitrary code. (CVE-2017-12607)\n\nMarcin Noga discovered that LibreOffice incorrectly handled Word documents.\nIf a user were tricked into opening a specially crafted Word document, a\nremote attacker could cause LibreOffice to crash, and possibly execute\narbitrary code. (CVE-2017-12608)\n","status":"published","published":"2017-11-02T12:45:40Z","modified":"2026-04-22T09:40:02.720499Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}