Apache OpenOffice Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	101585
Class:	Design Error
CVE:	CVE-2017-9806 CVE-2017-12607 CVE-2017-12608
Remote:	Yes
Local:	No
Published:	Oct 26 2017 12:00AM
Updated:	Dec 19 2017 08:00PM
Credit:	Marcin �??Icewall�?? Noga of Cisco Talos
Vulnerable:	Apache Openoffice 4.1.3
Not Vulnerable:

Apache OpenOffice Multiple Remote Code Execution Vulnerabilities

Apache OpenOffice is prone to multiple remote code-execution vulnerabilities.

Attackers can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause a denial-of-service condition.

Apache OpenOffice 4.1.3 is vulnerable; other versions may also be affected.

Apache OpenOffice Multiple Remote Code Execution Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apache OpenOffice Multiple Remote Code Execution Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apache OpenOffice Multiple Remote Code Execution Vulnerabilities

References:

• Vulnerability Spotlight: Apache OpenOffice Vulnerabilities (talosintelligence.com)
  
• Apache Homepage (Apache)