CVE-2021-41830: Double Certificate Attack
It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25633 for the LibreOffice advisory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
apache/openofficeto a version that resolves this vulnerability.Fixed in 4.1.11
Event History
Frequently Asked Questions
What is CVE-2021-41830?
CVE-2021-41830 refers to a vulnerability in Apache OpenOffice that allows attackers to manipulate signed documents and macros to appear to come from a trusted source.
Which versions of Apache OpenOffice are affected by CVE-2021-41830?
All versions of Apache OpenOffice up to 4.1.10 are affected.
How can an attacker exploit CVE-2021-41830?
An attacker can exploit CVE-2021-41830 by manipulating signed documents and macros to appear legitimate and from a trusted source.
What is the severity rating of CVE-2021-41830?
CVE-2021-41830 has a severity rating of 7.5 (high).
How can I protect myself from CVE-2021-41830?
To protect yourself from CVE-2021-41830, it is advised to update Apache OpenOffice to version 4.1.11.