libreoffice libreoffice CVE-2022-26305 in LibreOffice and Canonical Products
Published on July 25, 2022

Execution of Untrusted Macros Due to Improper Certificate Validation

product logo product logo
An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only matching the serial number and issuer string of the used certificate with that of a trusted certificate. This is not sufficient to verify that the macro was actually signed with the certificate. An adversary could therefore create an arbitrary certificate with a serial number and an issuer string identical to a trusted certificate which LibreOffice would present as belonging to the trusted author, potentially leading to the user to execute arbitrary code contained in macros improperly trusted. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 versions prior to 7.3.1.

NVD

Weakness Type

Improper Certificate Validation

The software does not validate, or incorrectly validates, a certificate. When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host.


Products Associated with CVE-2022-26305

stack.watch emails you whenever new vulnerabilities are published in LibreOffice or Canonical Ubuntu Linux. Just hit a watch button to start following.

LibreOffice
 
Canonical Ubuntu Linux
 

Affected Versions

The Document Foundation LibreOffice:

Exploit Probability

EPSS
1.11%
Percentile
64.07%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.