writeups.xyz / Every Signature is Broken: On the Insecurity of Microsoft Office’s OOXML Signatures

Submitter : c2a

Date: 11 November 2022

Bounty : undisclosed

Vulnerabilities :

• Signature Bypass
• Signature Forgery
• Cryptographic Issues
• Windows

Programs :

• Microsoft

Authors :

• Simon Rohlmann
• Vladislav Mladenov
• Christian Mainka
• Daniel Hirschberger
• Jörg Schwenk

Link :
https://www.usenix.org/system/files/sec23summer_235-rohlmann-prepub.pdf