CVE-2021-41831

Timestamp Manipulation with Signature Wrapping

State: Published
Severity: Not scored
Published: Oct 11, 2021
Updated: Aug 4, 2024
Reserved: Sep 30, 2021

Description

It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.

Scores

The record has no CVSS score.

Weaknesses

CWE-347 Improper Verification of Cryptographic Signature

Affected Products

Product	Versions
Apache OpenOfficeApache Software Foundation	Apache OpenOffice through 4.1.10Affected OpenOffice.org through 3.4Affected

References

https://lists.apache.org/thread.html/ra74d5057cdc781a36286a83e8bcbc90a7678f030ae73339c35dfc4f9%40%3Cusers.openoffice.apache.org%3E
[announce] 20211010 CVE-2021-41831: Apache OpenOffice: Timestamp Manipulation with Signature Wrappingmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.