Skip to content
CVE PROGRAM SOURCE RECORD5.2 Medium

CVE-2021-25635

Content Manipulation with Certificate Validation Attack

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Document Fdn.

Description

An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then modify it to change the signature algorithm to an invalid (or unknown to LibreOffice) algorithm and LibreOffice would incorrectly present such a signature with an unknown algorithm as a valid signature issued by a trusted person This issue affects LibreOffice: from 7.0 before 7.0.5, from 7.1 before 7.1.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Document Foundation LibreOffice

Default version status: unknown

  • 7.0 to < 7.0.5affected
  • 7.1 to < 7.1.1affected

References