CVE-2007-0163
- State
- Published
- Severity
- Not scored
- Published
- Jan 10, 2007
- Updated
- Aug 7, 2024
- Reserved
- Jan 9, 2007
Description
SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20070106 Cracking Steganography Application in less than ONE minutemailing-list
- 20070107 A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)mailing-list
- 31244vdb-entry
- steganography-password-security-bypass(31378)vdb-entry
- http://homepage.mac.com/adonismac/Advisory/steg/steganography.html
- 23639third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.