CWE Code: 426
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Untrusted Search Path
Summary: an installer defect known as an "unquoted windows search path vulnerability" affected the apache openoffice before 4.1.3 installers for windows. the pc must have previously been infected by a trojan horse application (or user) running with administrative privilege. any installer with the unquoted search path vulnerability becomes a delayed trigger for the exploit.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-11-13
Last Modified Date: 2017-11-29