These Microsoft Office security signatures are 'practically worthless'

Turns out it's easy to forge documents relying on OOXML

Office Open XML (OOXML) Signatures, an Ecma/ISO standard used in Microsoft Office applications and open source OnlyOffice, have several security flaws and can be easily spoofed.…

applications documents flaws forge iso microsoft microsoft office office ooxml open source security security flaws signatures spoofed standard xml