Aryabinin

Name of the Vulnerable Software and Affected Versions: The Sleuth Kit versions 4.6.0 and earlier Description: The issue is related to an integer overflow that can cause a crash when opening a crafted disk image. Specifically, the problem lies in the `hfs cat traverse()` function, located in the `tsk/fs/hfs.c` file, at lines 952 and 1062. This function is part of the fls tool used on HFS images. The attack vector involves a victim opening a crafted HFS filesystem image, which can trigger the crash. Recommendations: For versions 4.6.0 and earlier, consider avoiding the use of the fls tool on HFS images until a fix is available. As a temporary workaround, restrict access to the `hfs cat traverse()` function in the `tsk/fs/hfs.c` file to minimize the risk of exploitation.