CVE-2017-12608

A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.

• CWE-787

• http://www.securityfocus.com/bid/101585Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039733Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039735Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2017/12/msg00017.htmlThird Party Advisory
• https://www.debian.org/security/2017/dsa-4022Third Party Advisory
• https://www.openoffice.org/security/cves/CVE-2017-12608.htmlRelease Notes, Vendor Advisory
• http://www.securityfocus.com/bid/101585Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039733Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039735Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2017/12/msg00017.htmlThird Party Advisory
• https://www.debian.org/security/2017/dsa-4022Third Party Advisory
• https://www.openoffice.org/security/cves/CVE-2017-12608.htmlRelease Notes, Vendor Advisory

Published

Nov 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12602OpenCV (Open Source Computer Vision Library) through 3.3 has…
• CVE-2017-12603OpenCV (Open Source Computer Vision Library) through 3.3 has…8.8
• CVE-2017-12604OpenCV (Open Source Computer Vision Library) through 3.3 has…8.8
• CVE-2017-12605OpenCV (Open Source Computer Vision Library) through 3.3 has…8.8
• CVE-2017-12606OpenCV (Open Source Computer Vision Library) through 3.3 has…8.8
• CVE-2017-12607A vulnerability in OpenOffice's PPT file parser before 4.1.4…7.8
• CVE-2017-12609Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1261IBM Security Guardium 10.0 stores potentially sensitive info…
• CVE-2017-12610In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.…
• CVE-2017-12611In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10…
• CVE-2017-12612In Apache Spark 1.6.0 until 2.1.1, the launcher API performs…
• CVE-2017-12613When apr_time_exp*() or apr_os_exp_time*() functions are inv…7.1