CVE-2017-9806

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
Apache Software Foundation	Apache OpenOffice	4.0.0 to 4.1.3, and some previous releases, including some using our old OpenOffice.org brand

References

http://www.openoffice.org/security/cves/CVE-2017-9806.htmlVendor Advisory
http://www.securityfocus.com/bid/101585Broken Link, Third Party Advisory, VDB Entry
http://www.openoffice.org/security/cves/CVE-2017-9806.htmlVendor Advisory
http://www.securityfocus.com/bid/101585Broken Link, Third Party Advisory, VDB Entry

Timeline

Published: Nov 20, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-98079.8An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/con CVE-2017-98086.1OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).CVE-2017-98095.3OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure.CVE-2017-98108.8There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Crit CVE-2017-98119.8The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critic CVE-2017-98127.5The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server CVE-2017-98136.1In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptName parameter of the CVE-2017-98147.5cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mis CVE-2017-98156.5In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a malloc operation, which allows attackers to CVE-2017-98166.1Cross-site scripting (XSS) vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary we CVE-2017-98187.5The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attac CVE-2017-98199.8The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes i