PT-2007-1648 · Unknown · Camouflage

Publicado 2007-01-10 · Atualizado 2018-10-16 · CVE-2007-0164

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Camouflage version 1.2.1

Description The issue allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing certain bytes of the JPEG image with alternate password information, as the software embeds password information in the carrier file.

Recommendations For Camouflage version 1.2.1, consider removing or securely storing password information from the carrier file to prevent unauthorized access, and avoid using the same password across multiple files to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-0164

Produtos afetados

Camouflage

Referências · 7

• 🔥 http://homepage.mac.com/adonismac/Advisory/steg/camouflage.html · Exploit
• http://secunia.com/advisories/23578 · Aviso do Fabricante
• http://securityfocus.com/archive/1/456541/100/0/threaded · Nota
• http://securityfocus.com/bid/21939 · Nota
• http://osvdb.org/32651 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0164 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31375 · Nota