CVE-2016-6804

—

CVSS 3.1

7.8 high

EPSS

3%p87

Published

Nov 20, 2017 (Nov 20, 2017)

Modified

Jun 17, 2026

Description

The Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice.org) for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned by a file that impersonates a dynamic-link library that the installer depends upon.

Vendors: apache
Products: openoffice
Weakness: CWE-264
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news0 stories

No ingested article mentions this CVE yet.