CVE-2015-2987
Summary
| CVE | CVE-2015-2987 |
|---|---|
| State | PUBLISHED |
| Assigner | jpcert |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2015-08-28 15:59:00 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | Type74 ED before 4.0 misuses 128-bit ECB encryption for small files, which makes it easier for attackers to obtain plaintext data via differential cryptanalysis of a file with an original length smaller than 128 bits. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
HighAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:H/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| jvndb.jvn.jp/jvndb/JVNDB-2015-000119 | af854a3a-2127-422b-91ae-364da2661108 | jvndb.jvn.jp | Vendor Advisory |
| JVN公開情報につきまして - Type74.orgのブログ | af854a3a-2127-422b-91ae-364da2661108 | type74org.blog14.fc2.com | Vendor Advisory |
| JVN#91474878: File Encryption Software "ED" where encrypted data may be easier to decipher when files of small size are encrypted | af854a3a-2127-422b-91ae-364da2661108 | jvn.jp | Vendor Advisory |
| EDマニュアル - ５－１、暗号技術について | フリーソフト・各種情報発信サイトType74.org | af854a3a-2127-422b-91ae-364da2661108 | type74.org | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 900283 CBL-Mariner Linux Security Update for ed 1.14.2
- 901908 Common Base Linux Mariner (CBL-Mariner) Security Update for ed (6376-1)
- 903142 Common Base Linux Mariner (CBL-Mariner) Security Update for ed (1818)
- 906115 Common Base Linux Mariner (CBL-Mariner) Security Update for ed (1818-1)
- 906444 Common Base Linux Mariner (CBL-Mariner) Security Update for ed (6376-2)