CVE-2015-2987 Type74 ED before 4.0 misuses 128-bit ECB encryption for small files, which makes it easier for attackers to obtain plaintext data via differential cryptanalysis of a file with an original length small...
LowCVSS 2.6
EPSS 0.70%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Type74 ED before 4.0 misuses 128-bit ECB encryption for small files, which makes it easier for attackers to obtain plaintext data via differential cryptanalysis of a file with an original length smaller than 128 bits.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| type74 ed | <= 3.4 | No fix listed |
References
- JVN#91474878 third-party-advisory vendor-advisory
- JVNDB-2015-000119 third-party-advisory vendor-advisory
- type74.org patch vendor-advisory
- type74org.blog14.fc2.com vendor-advisory