CVE-2007-4037

Опубликовано: 27 июл. 2007

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certain large offset. NOTE: the vendor disputes the significance of this issue, asserting that relevant attackers typically do not corrupt a filesystem, and indicating that the relevant read operation can be disabled

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:guidance_software:encase:*:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00637

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-8hqf-m7vp-fcgv

github

почти 4 года назад

** DISPUTED ** Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certain large offset. NOTE: the vendor disputes the significance of this issue, asserting that relevant attackers typically do not corrupt a filesystem, and indicating that the relevant read operation can be disabled.