CVE-2021-41830
Assigner: apache
Published: 2021-10-11T08:10:12
State: PUBLISHED
affected: product: Apache OpenOffice
vendor: Apache Software Foundation
versions: lessThanOrEqual: 4.1.10
status: affected
version: Apache OpenOffice
versionType: custom
lessThanOrEqual: 3.4
status: affected
version: OpenOffice.org
versionType: custom
credits: value: Apache OpenOffice would like to thank Simon Rohlmann, Vladislav Mladenov, Christian Mainka, and Jorg Schwenk of Ruhr University Bochum, Germany
descriptions: value: It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25633 for the LibreOffice advisory.
metrics: other: content: other: high
type: unknown
problemTypes: descriptions: cweId: CWE-347
description: CWE-347 Improper Verification of Cryptographic Signature
type: CWE
source: discovery: UNKNOWN
title: Double Certificate Attack
x_generator: engine: Vulnogram 0.0.9