Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Brian Carrier Subscribe
Filtered by product The Slueth Kit
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-4196 1 Brian Carrier 1 The Slueth Kit 2018-10-15 4.3 MEDIUM N/A
icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 misinterprets a certain memory location as the holder of a loop iteration count, which allows user-assisted remote attackers to cause a denial of service (long loop) and prevent examination of certain NTFS files via a malformed NTFS image.
CVE-2007-4197 1 Brian Carrier 1 The Slueth Kit 2018-10-15 4.3 MEDIUM N/A
icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 omits NULL pointer checks in certain code paths, which allows user-assisted remote attackers to cause a denial of service (NULL dereference and application crash) and prevent examination of certain NTFS files via a malformed NTFS image.
CVE-2007-4198 1 Brian Carrier 1 The Slueth Kit 2018-10-15 4.3 MEDIUM N/A
The fs_data_put_str function in ntfs.c in fls in Brian Carrier The Sleuth Kit (TSK) before 2.09 does not validate a certain length value, which allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image, which triggers a buffer over-read.
CVE-2007-4199 1 Brian Carrier 1 The Slueth Kit 2018-10-15 4.3 MEDIUM N/A
Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image that triggers (1) dereference of a certain integer value by ntfs_dent.c in fls, or (2) dereference of a certain other integer value by ntfs.c in fsstat.
CVE-2007-4200 1 Brian Carrier 1 The Slueth Kit 2018-10-15 4.3 MEDIUM N/A
ntfs.c in fsstat in Brian Carrier The Sleuth Kit (TSK) before 2.09 interprets a certain variable as a byte count rather than a count of 32-bit integers, which allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image.