CVE-2017-9806 — HIGH (7.8) — White Hats Nepal

Q: How severe is CVE-2017-9806?

CVE-2017-9806 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2017-9806?

Check the references section above for vendor advisories and patch information. Affected products include: Apache Openoffice.

Vulnerability Description

A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Apache	Openoffice	< 4.1.4

Related Weaknesses (CWE)

CWE-787

References

http://www.openoffice.org/security/cves/CVE-2017-9806.htmlVendor Advisory
http://www.securityfocus.com/bid/101585Broken LinkThird Party AdvisoryVDB Entry
http://www.openoffice.org/security/cves/CVE-2017-9806.htmlVendor Advisory
http://www.securityfocus.com/bid/101585Broken LinkThird Party AdvisoryVDB Entry

FAQ

What is CVE-2017-9806?

CVE-2017-9806 is a vulnerability with a CVSS score of 7.8 (HIGH). A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service (memory ...

How severe is CVE-2017-9806?

CVE-2017-9806 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-9806?

Check the references section above for vendor advisories and patch information. Affected products include: Apache Openoffice.