CVE-2016-6804: Critical severity apache openoffice vulnerability
The Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice.org) for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned by a file that impersonates a dynamic-link library that the installer depends upon.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2016-6804?
CVE-2016-6804 is a vulnerability in the Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice.org) for Windows that allows execution of arbitrary code with elevated privileges.
How does CVE-2016-6804 affect Apache OpenOffice?
CVE-2016-6804 affects Apache OpenOffice installer versions prior to 4.1.3, including some branded as OpenOffice.org, on Windows systems.
What is the severity of CVE-2016-6804?
CVE-2016-6804 has a severity rating of 7.8, which is considered critical.
How can I fix CVE-2016-6804?
To fix CVE-2016-6804, upgrade to Apache OpenOffice version 4.1.3 or later.
Where can I find more information about CVE-2016-6804?
You can find more information about CVE-2016-6804 at the following references: [1] http://www.securityfocus.com/bid/93774, [2] http://www.securitytracker.com/id/1037016, [3] https://www.openoffice.org/security/cves/CVE-2016-6804.html