CVE

Id
27393  
CVE No.
CVE-2007-4036  
Status
Candidate  
Description
** DISPUTED ** Guidance Software EnCase allows user-assisted remote attackers to cause a denial of service via (1) a corrupted Microsoft Exchange database, which triggers an application crash when many options are selected; (2) a corrupted NTFS filesystem, which causes the application to report "memory allocation errors;" or (3) deeply nested directories, which trigger an application crash during an Expand All action. NOTE: the vendor disputes the significance of these vectors because the user can select fewer options, there is no operational impact, or the user can do less expansion.  
Phase
Assigned (20070727)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
281782 27393 CVE-2007-4036 BUGTRAQ:20070726 Guidance Software response to iSEC report on EnCase  View
281783 27393 CVE-2007-4036 URL:http://www.securityfocus.com/archive/1/archive/1/474727/100/0/threaded  View
281784 27393 CVE-2007-4036 BUGTRAQ:20070727 Re: Guidance Software response to iSEC report on EnCase (fwd)  View
281785 27393 CVE-2007-4036 URL:http://www.securityfocus.com/archive/1/archive/1/474750/100/0/threaded  View
281786 27393 CVE-2007-4036 BUGTRAQ:20070726 Re: Guidance Software response to iSEC report on EnCase  View
281787 27393 CVE-2007-4036 URL:http://www.securityfocus.com/archive/1/archive/1/474809/100/0/threaded  View
281788 27393 CVE-2007-4036 BUGTRAQ:20070802 RE: Re: Guidance Software response to iSEC report on EnCase  View
281789 27393 CVE-2007-4036 URL:http://www.securityfocus.com/archive/1/archive/1/475335/100/0/threaded  View
281790 27393 CVE-2007-4036 MISC:http://www.blackhat.com/html/bh-usa-07/bh-usa-07-speakers.html#Palmer  View
281791 27393 CVE-2007-4036 MISC:http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf  View
281792 27393 CVE-2007-4036 BID:25100  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55496 JVNDB-2007-004188 Mozilla Firefox におけるクロスブラウザスクリプティング攻撃を実行される脆弱性 Mozilla Firefox は、Thunderbird がインストールされたシステム上で稼動しているおよび特定の URI が登録されている際、引数の挿入により、クロスブラウザスクリプティング攻撃を実行される、および任意のコマンドを実行される脆弱性が存在します。 CVE-2007-4038 27393 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004188.html  View