Privilege escalation in OpenOffice - CVE-2016-6803

Vulnerability identifier: #VU971

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-6803

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to execute arbitrary code with elevated privileges on the target system.
The weakness is caused by performing of improper operations for files that use a search path containing an unquoted element. Attackers can exploit the vulnerability by tricking the victim to execute arbitrary file downloaded by trojan horse application.
Successful exploitation of the vulnerability results in arbitrary code execution on the vulnerable system that may lead to complete system compromise.

OpenOffice

Update to version 4.1.3.
http://sourceforge.net/projects/openofficeorg.mirror/files/4.1.3/binaries/ru/Apache_OpenOffice_4.1.3...

• http://www.openoffice.org/security/cves/CVE-2016-6803.html

• Multiple vulnerabilities in Apache OpenOffice