CVE-2022-26305: Execution of Untrusted Macros Due to Improper Certificate Validation
First published: Mon Jul 25 2022(Updated: )
An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only matching the serial number and issuer string of the used certificate with that of a trusted certificate. This is not sufficient to verify that the macro was actually signed with the certificate. An adversary could therefore create an arbitrary certificate with a serial number and an issuer string identical to a trusted certificate which LibreOffice would present as belonging to the trusted author, potentially leading to the user to execute arbitrary code contained in macros improperly trusted. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions prior to 7.3.1.
Credit: security@documentfoundation.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| The Document Foundation LibreOffice | >=7.2.0<7.2.7 | |
| The Document Foundation LibreOffice | >=7.3.0<7.3.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-26305?
CVE-2022-26305 is an Improper Certificate Validation vulnerability in LibreOffice.
How does CVE-2022-26305 impact LibreOffice?
CVE-2022-26305 allows an attacker to successfully pass off a malicious macro as being signed by a trusted author.
What is the severity of CVE-2022-26305?
CVE-2022-26305 has a severity rating of 7.5, which is considered high.
Which versions of LibreOffice are affected by CVE-2022-26305?
LibreOffice versions 7.2.0 to 7.2.7 and 7.3.0 to 7.3.2 are affected by CVE-2022-26305.
How can I fix CVE-2022-26305?
To fix CVE-2022-26305, it is recommended to update LibreOffice to a version that has the necessary security patches.
- agent/type
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/author
- agent/severity
- agent/last-modified-date
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/libreoffice
- canonical/the document foundation libreoffice
- version/the document foundation libreoffice/7.2.0
- version/the document foundation libreoffice/7.3.0