CVE-2007-0163

Published: Jan 10, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information.

Affected (2)

Products: Securekit: Securekit Steganography

1 product

Securekit Steganography

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Securekit Securekit Steganography	Version 1.7.1
Securekit Securekit Steganography	Version 1.8

References (12)

http://homepage.mac.com/adonismac/Advisory/steg/steganography.html

Source: cve@mitre.org

ExploitVendor Advisory

http://osvdb.org/31244

Source: cve@mitre.org

http://secunia.com/advisories/23639

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/456283/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/456519/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/31378

Source: cve@mitre.org

http://homepage.mac.com/adonismac/Advisory/steg/steganography.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://osvdb.org/31244

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23639

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/456283/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/456519/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/31378

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.