CVE-2016-6803

published 2017-11-13

CVE-2016-6803: An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Windows. The PC must…

high 7.8 CVSS 3.0

AV L AC L PR N UI R S U C H I H A H

An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Windows. The PC must have previously been infected by a Trojan Horse application (or user) running with administrative privilege. Any installer with the unquoted search path vulnerability becomes a delayed trigger for the exploit.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
apache	openoffice	<= 4.1.2	—
apache_software_foundation	apache_openoffice	—	—
apache_software_foundation	apache_openoffice	—	—

CWE-426