Back to Database
Status published
Medium
CVE-2007-4197
icat in Brian Carrier The Sleuth Kit (TSK) before 2.09...
Vulnerability Description
icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 omits NULL pointer checks in certain code paths, which allows user-assisted remote attackers to cause a denial of service (NULL dereference and application crash) and prevent examination of certain NTFS files via a malformed NTFS image.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-4197
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/archive/1/474809/100/0/threaded
- http://www.securityfocus.com/bid/25181
- http://www.securityfocus.com/archive/1/475335/100/0/threaded
- http://sourceforge.net/mailarchive/message.php?msg_name=A19F11EF-13CA-4940-AFF3-9BE08F67EE22%40sleuthkit.org
- http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
More from brian carrier
View All →CVE-2007-4200
ntfs.c in fsstat in Brian Carrier The Sleuth Kit (TSK)...
Medium
4.3
CVE-2007-4199
Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted...
Medium
4.3
CVE-2007-4198
The fs_data_put_str function in ntfs.c in fls in Brian Carrier...
Medium
4.3
CVE-2007-4196
icat in Brian Carrier The Sleuth Kit (TSK) before 2.09...
Medium
4.3
Affected Vendor
brian carrier
View all reports →Affected Software
the slueth kit
Vulnerable Versions:
0
Timeline
Official Publish:
August 8th, 2007
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.