CVE-2021-41830 Double Certificate Attack

What is CVE-2021-41830?

CVE-2021-41830 is a high-severity vulnerability in Apache Openoffice, published on 11 Oct 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25633 for the LibreOffice advisory.

Weakness: CWE-347

Which versions are affected by CVE-2021-41830?

It affects 1 product.

Products include Apache Openoffice.

How do I fix CVE-2021-41830?

No fix has been published for CVE-2021-41830 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-41830 being exploited?

There is no known exploitation of CVE-2021-41830 in the wild and no public exploit code.

Other vulnerabilities in Apache Openoffice

• CVE-2014-3524 Command injection in n/a Critical 9.3
• CVE-2010-3450 Path traversal in n/a Critical 9.3
• CVE-2010-3451 Use after free in n/a Critical 9.3
• CVE-2010-3452 Use after free in n/a Critical 9.3
• CVE-2010-3453 Memory corruption in n/a Critical 9.3

All Apache Openoffice vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7qhr-g3xw-3692.