← Database

CVE-2007-4037

MEDIUM CVSS: 4.3 Published: 2007-07-27 Modified: 2026-06-16

Description

Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certain large offset. NOTE: the vendor disputes the significance of this issue, asserting that relevant attackers typically do not corrupt a filesystem, and indicating that the relevant read operation can be disabled

Affected Platforms

Guidance Software Encase

Weakness Type

CWE-119

References