CVE-2016-6803

EPSS 2.1%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 2.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

13 Nov 2017Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Windows. The PC must have previously been infected by a Trojan Horse application (or user) running with administrative privilege. Any installer with the unquoted search path vulnerability becomes a delayed trigger for the exploit.

Affected products

Apache Software Foundation · Apache OpenOffice

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.openoffice.org/security/cves/CVE-2016-6803.html http://www.securityfocus.com/bid/94418 http://www.securitytracker.com/id/1037015