This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2017-9806 →
DEBIAN-CVE-2017-9806
A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicio...
Original description
The description as published by the source.
A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
libreoffice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.3-1"}]}]
Debian:13
libreoffice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.3-1"}]}]
Debian:14
libreoffice
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.3-1"}]}]
References
- advisory security-tracker.debian.org