Use-After-Free Vulnerability in The Sleuth Kit by Brian Carrier
CVE-2007-4195

Currently unrated

Key Information:

Vendor: The Sleuth Kit
Status: The Sleuth Kit
Vendor: CVE Published:; 8 August 2007

🔔 Create The Sleuth Kit Vulnerability Alert

What is CVE-2007-4195?

A use-after-free vulnerability exists in ext2fs.c of The Sleuth Kit prior to version 2.09. This flaw occurs when user-assisted remote attackers exploit a malformed ext2fs image, leading to application crashes. Consequently, this prevents forensic experts from effectively examining specific ext2fs files, which could have significant implications for incident response and data recovery efforts.

References

http://www.securityfocus.com/archive/1/474809/100/0/threaded

mailing-listx_refsource_BUGTRAQ

http://osvdb.org/47000

vdb-entryx_refsource_OSVDB

http://www.securityfocus.com/bid/25181

vdb-entryx_refsource_BID

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 8, 2007
Vulnerability Reserved
Aug 7, 2007

CVE-2007-4195 Data

JSON