Multiple Nikon digital SLR camera image moderation Security Restriction Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
Nikon Image Authentication Software
Nikon Digital SLR Camera Nikon D700 0
Nikon Digital SLR Camera Nikon D3X 0
Nikon Digital SLR Camera Nikon D300S 0
Nikon Digital SLR Camera Nikon D300 0
Nikon Digital SLR Camera Nikon D3 0
Nikon Digital SLR Camera Nikon D2Xs 0
Nikon Digital SLR Camera Nikon D2X 0
Nikon Digital SLR Camera Nikon D2Hs 0
Nikon Digital SLR Camera Nikon D200 0
Description:
--------------------------------------------------------------------------------
Bugtraq id: 47630

Nikon, a well-known Japanese camera brand, is also one of the affiliated enterprises of the Mitsubishi Group.

Multiple Nikon digital SLR cameras have the Security Restriction Bypass Vulnerability in image authentication. Attackers can exploit this vulnerability to illegally modify image files.

This vulnerability allows attackers to retrieve original signature keys from Nikon cameras. In this way, you can use a fully valid signature to create malicious images.

<* Source: Elcomsoft

Link: http://www.elcomsoft.com/nikon.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Nikon
-----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.nikon.com/