CVE-2016-6803: Critical severity Apache OpenOffice vulnerability
An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Windows. The PC must have previously been infected by a Trojan Horse application (or user) running with administrative privilege. Any installer with the unquoted search path vulnerability becomes a delayed trigger for the exploit.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2016-6803?
CVE-2016-6803 is an installer defect known as an unquoted Windows search path vulnerability that affected the Apache OpenOffice before 4.1.3 installers for Windows.
What is the severity of CVE-2016-6803?
The severity of CVE-2016-6803 is critical with a CVSS score of 7.8.
What is the affected software by CVE-2016-6803?
The affected software by CVE-2016-6803 is Apache OpenOffice before version 4.1.3 for Windows.
How does CVE-2016-6803 affect Microsoft Windows?
CVE-2016-6803 does not directly affect Microsoft Windows, but the vulnerability can be exploited on a PC with a previously infected Trojan Horse application running with administrative privilege.
How can I fix CVE-2016-6803?
To fix CVE-2016-6803, update Apache OpenOffice to version 4.1.3 or later.