CVE-2007-4195 Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examinatio...
MediumCVSS 4.3
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain ext2fs files via a malformed ext2fs image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| the sleuth kit | <= 2.08 | No fix listed |
| debian/sleuthkit(Debian:12) | < 2.09-1 | 2.09-1 |
| debian/sleuthkit(Debian:13) | < 2.09-1 | 2.09-1 |
| debian/sleuthkit(Debian:14) | < 2.09-1 | 2.09-1 |
References
- 47000 vdb-entry
- [sleuthkit-announce] 20070614 TSK 2.09 Released and new Wiki mailing-list
- www.isecpartners.com
- 20070726 Re: Guidance Software response to iSEC report on EnCase mailing-list
- 20070802 RE: Re: Guidance Software response to iSEC report on EnCase mailing-list
- 25181 vdb-entry
- Debian Security Tracker CVE-2007-4195 vendor-advisory