LibreOffice Fixes Flaw That Allow Attackers To Spoof Docs

Share post:

LibreOffice and OpenOffice have recently fixed a vulnerability that allows attackers to manipulate documents to appear to be signed by a trusted source.

The error, named CVE-2021-41832, was discovered by four researchers at the Ruhr University Bochum and is classified as moderate, but has serious consequences.

For those who use one of the two open-source office suites, it is recommended to manually update to the latest available versions of OpenOffice, which are 4.1.10 and later, and 7.0.5 or 7.1.1 and later for LibreOffice, by downloading them from their respective download centers since the two applications do not provide automatic upgrades.

Linux users who do not have the specified version update are recommended to download the “deb”, or “rpm” package from the download centre or build LibreOffice from source.

In situations where upgrading to the latest version is not possible, users are advised to completely disable the macro functionality of their Office suite and set macro security to LibreOffice. It is recommended to go to Tools-Options-LibreOffice-Security and finally click on ‘Macro Security’ from where you can choose between four different security levels.

For more information, read the original story in Bleeping Computer.

SUBSCRIBE NOW

Related articles

Sleeper Supply Chain Attack Activates After 6 Years

A coordinated supply chain attack has compromised between 500 and 1,000 e-commerce websites by exploiting vulnerabilities in 21...

Russian-Controlled Open Source Tool Raises Alarms Over U.S. Cybersecurity

A widely used open-source Go library, easyjson, used in healthcare, finance and even defence has come under scrutiny...

Signal Archiving Tool Used By Trump Admin Is Breached, Raising Alarms Over Messaging Security (EDITORIAL)

(EDITORIAL) A messaging tool used by Trump administration officials to archive encrypted Signal messages has been hacked —...

Anthropic Warns: AI “Virtual Employees” Could Pose Security Risks Within a Year

Anthropic, a leading artificial intelligence company, anticipates that AI-powered virtual employees could begin operating within corporate networks as...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways