CVE-2007-4195

CVE-2007-4195 describes a use-after-free in ext2fs.c of The Sleuth Kit (TSK) prior to 2.09. The issue allows user-assisted remote attackers to cause a denial of service (application crash) and to prevent examination of certain ext2fs files via a malformed ext2fs image. This is the extent of the i...

CVE-2007-4199

CVE-2007-4199 affects The Sleuth Kit (TSK) before 2.09. A malformed NTFS image can trigger dereferencing an integer value in ntfs_dent.c (fls) or in ntfs.c (fsstat), allowing user-assisted remote attackers to cause a denial of service (application crash) and hinder examination of certain NTFS fil...

CVE-2007-4200

ntfs.c in fsstat in Brian Carrier The Sleuth Kit TSK before 2.09 interprets a certain variable as a byte count rather than a count of 32-bit integers, which allows user-assisted remote attackers to cause a denial of service application crash and prevent examination of certain NTFS files via a...

CVE-2007-4198

The Sleuth Kit (TSK) tool fls uses fs_data_put_str in ntfs.c and, for versions before 2.09, does not validate a particular length value. This can cause a denial of service (application crash) and prevent examination of certain NTFS files when processing a malformed NTFS image, due to a buffer ove...

CVE-2007-4196

The vulnerability CVE-2007-4196 affects icat in The Sleuth Kit (TSK) prior to 2.09. The flaw arises when icat misinterprets a memory location as the loop iteration counter, enabling user-assisted remote attackers to trigger a long loop DoS and to hinder examination of certain NTFS files via a mal...

CVE-2007-4197

The Sleuth Kit (TSK) icat is affected in versions before 2.09 due to omitted NULL pointer checks in certain code paths. This vulnerability can allow user‑assisted remote attackers to trigger a denial of service (NULL dereference and application crash) and hinder examination of NTFS images due to ...

CVE-2007-4200

The Sleuth Kit (TSK) project is affected by CVE-2007-4200 in the ntfs.c file of fsstat, with the issue occurring in versions prior to 2.09. A variable is interpreted as a byte count rather than a count of 32-bit integers, enabling user-assisted remote attackers to trigger a denial of service (app...