CVE-2007-0164

Camouflage 1.2.1 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing certain bytes of the JPEG image with alternate password information.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2007-01-10

Last modified

2024-08-07

Affected products

• Camouflage (Camouflage)

References

• http://homepage.mac.com/adonismac/Advisory/steg/camouflage.html
• http://osvdb.org/32651
• http://secunia.com/advisories/23578
• http://www.securityfocus.com/archive/1/456541/100/0/threaded
• http://www.securityfocus.com/bid/21939
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31375