Unscored CVE-2021-41832 EUVD-2021-28833GHSA-72qv-v5c2-v52f

Content Manipulation with Certificate Validation Attack

Published Oct 11, 2021 · Updated Aug 4, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache OpenOffice

Description

It is possible for an attacker to manipulate documents to appear to be signed by a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25635 for the LibreOffice advisory.

Affected products

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache OpenOffice	Apache OpenOffice – ≤ 4.1.10, OpenOffice.org – ≤ 3.4	—

References

https://lists.apache.org/thread.html/rd3214a568b43dd335b5d558f521377f4bff750684dea18eb041fc1bb%40%3Cusers.openoffice.apache.org%3E
[announce] 20211010 CVE-2021-41832: Apache OpenOffice: Content Manipulation with Certificate Validation Attack mailing-list