Skip to content
OpenAdvisories
Unscored CVE-2021-41830 EUVD-2021-28831GHSA-7qhr-g3xw-3692

Double Certificate Attack

Published Oct 11, 2021 · Updated Aug 4, 2024 · Assigned by apache

Description

It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25633 for the LibreOffice advisory.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache OpenOffice Apache OpenOffice – ≤ 4.1.10, OpenOffice.org – ≤ 3.4 —

References