Skip to content
OpenAdvisories
Unscored CVE-2021-41831 EUVD-2021-28832GHSA-r2f7-jghr-r7x9

Timestamp Manipulation with Signature Wrapping

Published Oct 11, 2021 · Updated Aug 4, 2024 · Assigned by apache

Description

It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache OpenOffice Apache OpenOffice – ≤ 4.1.10, OpenOffice.org – ≤ 3.4 —

References