{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-01-15T00:00:00", "descriptions": [{"lang": "en", "value": "Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-11T19:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "mathantispam-captcha-security-bypass(39688)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39688"}, {"name": "27287", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/27287"}, {"name": "20080115 Defeating audio captcha systems", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/486331/100/200/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://docs.google.com/View?docid=df36cd52_19xzmkwqcg"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-7216", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "mathantispam-captcha-security-bypass(39688)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39688"}, {"name": "27287", "refsource": "BID", "url": "http://www.securityfocus.com/bid/27287"}, {"name": "20080115 Defeating audio captcha systems", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/486331/100/200/threaded"}, {"name": "http://docs.google.com/View?docid=df36cd52_19xzmkwqcg", "refsource": "MISC", "url": "http://docs.google.com/View?docid=df36cd52_19xzmkwqcg"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-7216", "datePublished": "2009-09-11T16:00:00", "dateReserved": "2009-09-11T00:00:00", "dateUpdated": "2018-10-11T19:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wordpress:peter\\'s_math_anti-spam_for_wordpress:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F50482F-7E89-4B2A-BDA6-43E514C49916", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip."}, {"lang": "es", "value": "La extensi\u00f3n Peter's Math Anti-Spam Spinoff para WordPress genera un clip de audio CAPTCHA concatenando ficheros de audio est\u00e1tico sin distorsiones adicionales, lo que permite a atacantes remotos saltarse la protecci\u00f3n CAPTCHA leyendo los byte concretos del clip generado.\r\n"}], "id": "CVE-2008-7216", "lastModified": "2018-10-11T20:58:33.520", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2009-09-11T16:30:00.563", "references": [{"source": "cve@mitre.org", "url": "http://docs.google.com/View?docid=df36cd52_19xzmkwqcg"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/486331/100/200/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/27287"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39688"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}