CVE-2007-0163
SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which...
SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information.
Exploit likelihood
What each source reports
NVD Score used
SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information.
- Record
CVE-2007-0163- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:C/I:N/A:N - Updated
- 2026-11-02
CVE List No score
SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information.
- Record
CVE-2007-0163- Updated
- 2026-11-02
EUVDEUVD-2007-0167 No score
SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information.
- Record
EUVD-2007-0167- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f6vv-rhj3-6hcp No score
SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which...
SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information.
- Record
GHSA-f6vv-rhj3-6hcp- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0163 is a high vulnerability (CVSS 7.8) in Securekit Steganography, published January 10, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.07%, the 81st percentile. No source names a fixed version.
References
securityfocus.com/archive/1/456283/100/0/threaded
osvdb.org/31244
exchange.xforce.ibmcloud.com/vulnerabilities/31378
homepage.mac.com/adonismac/Advisory/steg/steganography.html
secunia.com/advisories/23639
nvd.nist.gov/vuln/detail/CVE-2007-0163
github.com/advisories/GHSA-f6vv-rhj3-6hcp