CVE-2024-7788 — Signatures in "repair mode" should not be trusted

CVE-2024-7788

Signatures in "repair mode" should not be trusted PUBLISHED

Description (CNA)

Improper Digital Signature Invalidation vulnerability in Zip Repair Mode of The Document Foundation LibreOffice allows Signature forgery vulnerability in LibreOfficeThis issue affects LibreOffice: from 24.2 before < 24.2.5.

Affected (CNA)

Vendor / product	Versions
The Document Foundation / LibreOffice	affected 24.2 before < 24.2.5

CWE

CWE-347

References

https://www.libreoffice.org/about-us/security/advisories/CVE-2024-7788

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://lists.debian.org/debian-lts-announce/2024/10/msg00007.html