OpenOffice versions 2.3.0 and 2.2.0 fail to protect certificate information in signed ODF documents.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/61800/openoffice-signature.txt
Source: https://packetstormsecurity.com/files/61800/openoffice-signature.txt.html