NVD

Id
56168  
Name
CVE-2007-4037  
Description
** DISPUTED ** Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certain large offset. NOTE: the vendor disputes the significance of this issue, asserting that relevant attackers typically do not corrupt a filesystem, and indicating that the relevant read operation can be disabled.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-07-27  
Modified Date
2008-09-05  
Seq
2007-4037  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286131 56168 CVE-2007-4037 http://www.blackhat.com/html/bh-usa-07/bh-usa-07-speakers.html#Palmer  View
286132 56168 CVE-2007-4037 http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf  View
286133 56168 CVE-2007-4037 20070726 Guidance Software response to iSEC report on EnCase  View
286134 56168 CVE-2007-4037 20070727 Re: Guidance Software response to iSEC report on EnCase (fwd)  View
286135 56168 CVE-2007-4037 20070726 Re: Guidance Software response to iSEC report on EnCase  View
286136 56168 CVE-2007-4037 20070802 RE: Re: Guidance Software response to iSEC report on EnCase  View
286137 56168 CVE-2007-4037 25100  View

Related JVN