Multiple Canon Digital Cameras HMAC Unauthorized Access Vulnerability

Bugtraq ID:	45106
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Nov 30 2010 12:00AM
Updated:	Nov 30 2010 05:05PM
Credit:	Dmitry Sklyarov
Vulnerable:	Canon EOS 7D 0 Canon EOS 5D Mark II 0 Canon EOS 5D 0 Canon EOS 50D 0 Canon EOS 500D 0 Canon EOS 450D 0 Canon EOS 40D 0 Canon EOS 20D 0 Canon EOS 1000D 0
Not Vulnerable:

Multiple Canon Digital Cameras HMAC Unauthorized Access Vulnerability

Multiple Canon digital cameras are prone to a vulnerability that may allow for the undetected modification of images.

An attacker can exploit this issue to perform unauthorized modifications to photo files.

The following devices are affected; other devices may also be affected:

EOS 20D
EOS 5D
EOS 30D
EOS 40D
EOS 450D
EOS 1000D
EOS 50D
EOS 5D Mark II
EOS 500D
EOS 7D

Multiple Canon Digital Cameras HMAC Unauthorized Access Vulnerability

The discoverer of this issue has developed a way to exploit this issue.

Multiple Canon Digital Cameras HMAC Unauthorized Access Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Canon Digital Cameras HMAC Unauthorized Access Vulnerability

References:

• Analysts Find Flaw In Canon Image Verification System (Network World)
  
• Canon Homepage (Canon)