CVE-2017-9806

7.8 highEPSS 1.8%

High (7.8) in apache openoffice. EPSS 1.8% chance of exploitation in the next 30 days.

A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2017-11-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apache:openoffice

References

http://www.openoffice.org/security/cves/CVE-2017-9806.html
http://www.securityfocus.com/bid/101585
http://www.openoffice.org/security/cves/CVE-2017-9806.html
http://www.securityfocus.com/bid/101585

Check your stack JSON