The host is installed with Apache OpenOffice before 4.1.11 and is prone to an improper verification of cryptographic signature vulnerability. A flaw is present in the application, which fails to properly validate an untrusted digital signature. Successful exploitation could allow an attacker to convert an untrusted digital signature into trusted ones and allows the time stamp of the signature to be changed arbitrarily.