PT-2007-5389 · Guidance · Encase

Published 2007-08-08 · Updated 2018-10-15 · CVE-2007-4194

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Guidance Software EnCase version 5.0

Description The issue allows user-assisted remote attackers to cause a denial of service, potentially consuming stack memory, and may have other unspecified impacts. This is achieved via a malformed file and is related to EnCase's file system parsing.

Recommendations For Guidance Software EnCase version 5.0, consider avoiding the use of malformed files to prevent potential denial of service attacks until a fix is available. As a temporary workaround, restrict the parsing of unknown or untrusted files by EnCase's file system parsing functionality to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-4194

Affected Products

Encase

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-4194 · Security Note
• http://osvdb.org/44739 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46230 · Note
• http://securityreason.com/securityalert/2967 · Note
• http://securityfocus.com/archive/1/474811/100/0/threaded · Note