CVE-2021-41832 Content Manipulation with Certificate Validation Attack

What is CVE-2021-41832?

CVE-2021-41832 is a high-severity vulnerability in Apache Openoffice, published on 11 Oct 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

It is possible for an attacker to manipulate documents to appear to be signed by a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25635 for the LibreOffice advisory.

Weakness: CWE-347

Which versions are affected by CVE-2021-41832?

It affects 1 product.

Products include Apache Openoffice.

How do I fix CVE-2021-41832?

No fix has been published for CVE-2021-41832 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-41832 being exploited?

There is no known exploitation of CVE-2021-41832 in the wild and no public exploit code.

Other vulnerabilities in Apache Openoffice

• CVE-2014-3524 Command injection in n/a Critical 9.3
• CVE-2010-3450 Path traversal in n/a Critical 9.3
• CVE-2010-3451 Use after free in n/a Critical 9.3
• CVE-2010-3452 Use after free in n/a Critical 9.3
• CVE-2010-3453 Memory corruption in n/a Critical 9.3

All Apache Openoffice vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-72qv-v5c2-v52f.