CVE-2016-6803

Related Files

Apache OpenOffice 1.0 Windows Installer Trojan Execution

Posted Nov 26, 2016

Authored by Cyril Vallicari

The Apache OpenOffice installer for Windows contained a defective operation that could trigger execution of unwanted software installed by a Trojan Horse application. The installer defect is known as an unquoted Windows search path vulnerability. In the case of Apache OpenOffice installers for Windows, the PC must have previously been infected by a Trojan Horse application (or user) running with administrator privilege. Any installer with the unquoted search path vulnerability becomes a delayed trigger for the exploit. The exploit may already have operated on the user's PC.

tags | advisory, trojan

systems | windows

advisories | CVE-2016-6803

SHA-256 | b11761ee166cb00e6ba0bf9385312c23f0c2bac21fc64c14b18cf0d87d0cdead

Download | Favorite | View