CVE-2008-7216

Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2009-09-11

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Peter's Math Anti-spam For Wordpress (Wordpress)

References

• http://docs.google.com/View?docid=df36cd52_19xzmkwqcg
• http://www.securityfocus.com/archive/1/486331/100/200/threaded
• http://www.securityfocus.com/bid/27287
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39688