CVE-2007-4194

Guidance Software EnCase 5.0 allows user-assisted remote attackers to cause a denial of service stack memory consumption and possibly have other unspecified impact via a malformed file, related to "EnCase's file system parsing." NOTE: this information is based upon a vague pre-advisory. It might...

CVE-2007-4194

Guidance Software EnCase 5.0 allows user-assisted remote attackers to cause a denial of service stack memory consumption and possibly have other unspecified impact via a malformed file, related to "EnCase's file system parsing." NOTE: this information is based upon a vague pre-advisory. It might...

CVE-2007-4201

Guidance Software EnCase 6.2 and 6.5 does not properly handle a volume with more than 25 partitions, which might allow remote attackers to prevent examination of certain data, a related issue to CVE-2007-4035...

CVE-2007-4202

Affected software: Guidance Software EnCase Enterprise Edition (EEE) 6. The vulnerability arises from weak identity verification between the EnCase SAFE server, the EnCase Servlet on target machines, and the target image request. The EnCase SAFE uses IP authentication to verify the servlet, enabl...

CVE-2007-4202

Guidance Software EnCase Enterprise Edition EEE 6 does not properly verify the identity of the acquisition target during communication with the EnCase Servlet EEE servlet, which might allow remote attackers to spoof the disk image...

CVE-2007-4201

CVE-2007-4201 concerns Guidance Software’s EnCase (versions 6.2/6.5). The issue: EnCase may fail to properly handle a volume with more than 25 partitions, making hidden or extra partitions potentially inaccessible for examination. The root cause is a limitation in partition visibility that preven...

CVE-2007-4194

CVE-2007-4194 concerns Guidance Software EnCase 5.0 and describes user‑assisted remote denial of service via a malformed file, related to EnCase’s file system parsing. The core weakness centers on how EnCase parses certain inputs, potentially causing stack memory consumption and unspecified impac...

CVE-2007-4037

Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certain large offset. NOTE: the vendor disputes the significance of this issue, asserting that relevant attackers...

CVE-2007-4035

Guidance Software EnCase does not properly handle 1 certain malformed MBR partition tables with many entries, which allows remote attackers to prevent logical collection of a disk image; 2 NTFS filesystems with directory loops, which allows remote attackers to prevent examination of certain...

CVE-2007-4036

Guidance Software EnCase allows user-assisted remote attackers to cause a denial of service via 1 a corrupted Microsoft Exchange database, which triggers an application crash when many options are selected; 2 a corrupted NTFS filesystem, which causes the application to report "memory allocation...

Design/Logic Flaw

Guidance Software EnCase does not properly handle 1 certain malformed MBR partition tables with many entries, which allows remote attackers to prevent logical collection of a disk image; 2 NTFS filesystems with directory loops, which allows remote attackers to prevent examination of certain...

Design/Logic Flaw

Guidance Software EnCase allows user-assisted remote attackers to cause a denial of service via 1 a corrupted Microsoft Exchange database, which triggers an application crash when many options are selected; 2 a corrupted NTFS filesystem, which causes the application to report "memory allocation...

CVE-2007-4037

Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certain large offset. NOTE: the vendor disputes the significance of this issue, asserting that relevant attackers...

CVE-2007-4036

Guidance Software EnCase allows user-assisted remote attackers to cause a denial of service via 1 a corrupted Microsoft Exchange database, which triggers an application crash when many options are selected; 2 a corrupted NTFS filesystem, which causes the application to report "memory allocation...

CVE-2007-4037

Summary: CVE-2007-4037 affects Guidance Software EnCase. A malformed NTFS filesystem containing a modified FILE record with a large offset can cause a buffer over-read and an application crash. The issue can be triggered by user-assisted attackers. The vendor disputes the significance, noting tha...

CVE-2007-4035

Guidance Software EnCase does not properly handle 1 certain malformed MBR partition tables with many entries, which allows remote attackers to prevent logical collection of a disk image; 2 NTFS filesystems with directory loops, which allows remote attackers to prevent examination of certain...

CVE-2007-4035

Guidance Software EnCase is affected by CVE-2007-4035 and related CVE-2007-4201 issues. The flaws involve improper handling of (1) malformed MBR partition tables with many entries that can prevent logical collection of a disk image, (2) NTFS filesystems with directory loops that can block examina...

CVE-2007-4036

The CVE-2007-4036 entry concerns Guidance Software EnCase. Affected component: EnCase (Desktop/forensics software). The vulnerability involves three user-assisted remote vectors: (1) corrupted Microsoft Exchange database causing an application crash when many options are selected; (2) corrupted N...

PT-2007-5245 · Guidance · Encase

Name of the Vulnerable Software and Affected Versions: Guidance Software EnCase affected versions not specified Description: The issue allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certai...

Guidance Software response to iSEC report on EnCase

Guidance Software Response to iSEC Report Guidance Software received and reviewed the report drafted by two presenters at the upcoming Black Hat USA conference. We have also spoken to Alex Stamos, one of the testing leaders. The report authors disclose that they conducted, over a period of six...