Aller au contenu
en Se connecter
5.2 Moyenne

CVE-2021-25635 An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document,…

Description

An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then modify it to change the signature algorithm to an invalid (or unknown to LibreOffice) algorithm and LibreOffice would incorrectly present such a signature with an unknown algorithm as a valid signature issued by a trusted person This issue affects LibreOffice: from 7.0 before 7.0.5, from 7.1 before 7.1.1.

Produits et versions touchés

Produit Versions touchées Corrigé en
LibreOffice 7.1 7.1 → < 7.1.1 7.1.1
LibreOffice 7.0 7.0 → < 7.0.5 7.0.5

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de LibreOffice

Les 48 CVE de LibreOffice →
CVE-2026-76181 Heap buffer overflow in dBASE index import 5.4 Moyenne CVE-2026-63270 URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information… 6.7 Moyenne CVE-2026-63269 LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer 6.7 Moyenne CVE-2026-63267 LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document 6.7 Moyenne
Suivre cette CVE