NetSight
IP …
medium4.3

CVE-2007-4037

Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modifi…

Impact

Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certain large offset. NOTE: the vendor disputes the significance of this issue, asserting that relevant attackers typically do not corrupt a filesystem, and indicating that the relevant read operation can be disabled

Affected products

VendorProductAffected versions
Guidance SoftwareEncase
All versions

Weakness classification

CWE-119

References