Vulnerabilitymedium
Digital Signature Spoofing Flaws Uncovered in OpenOffice and LibreOffice
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-25633 | LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since… | 7.5 | <1% | ||
| CVE-2021-25634 | LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since… | 7.5 | <1% | ||
| CVE-2021-25635 | An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target… | 5.2 | <1% | ||
CVE-2021-41830+2 related CVEs | It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source | 7.5 group max | 1% |
From the original article
1 min read at thehackernews.com
The maintainers of LibreOffice and OpenOffice have shipped security updates to their productivity software to remediate multiple vulnerabilities that could be weaponized by malicious actors to alter documents to make them appear as if they are digitally signed by a trusted source.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.