VulnerabilityModified

CVE-2016-1513

The Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read or write) or execute arbitrary code via crafted MetaActions in an (1) ODP or (2) OTP file.

HIGH 7.8EPSS 4.34%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (4.34%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 3.0: 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: 4.34% probability · 91th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-125, CWE-787
Affected: apache/openoffice
Source: cret@cert.org

EPSS trend

EPSS moved from 7.7% on 21 September 2026 to 4.3% on 26 October 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.

References

http://www.openoffice.org/security/cves/CVE-2016-1513.htmlVendor Advisory
http://www.securityfocus.com/bid/92079Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036443
http://www.talosintelligence.com/reports/TALOS-2016-0051/Third Party Advisory
http://www.ubuntu.com/usn/USN-3046-1
https://bz.apache.org/ooo/show_bug.cgi?id=127045Issue Tracking
https://security.gentoo.org/glsa/201703-01
http://www.openoffice.org/security/cves/CVE-2016-1513.htmlVendor Advisory
http://www.securityfocus.com/bid/92079Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036443
http://www.talosintelligence.com/reports/TALOS-2016-0051/Third Party Advisory
http://www.ubuntu.com/usn/USN-3046-1
https://bz.apache.org/ooo/show_bug.cgi?id=127045Issue Tracking
https://security.gentoo.org/glsa/201703-01

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.