cbcvebase.
CVE-2007-4195
published 2007-08-08

CVE-2007-4195: Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service…

medium4.3CVSS 3.1
AVNACMAuNCNINAP
Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain ext2fs files via a malformed ext2fs image.

Affected

6 ranges
VendorProductVersion rangeFixed in
debiansleuthkit< sleuthkit 2.09-1 (bookworm)sleuthkit 2.09-1 (bookworm)
sleuthkitsleuthkit>= 0 < 2.09-12.09-1
sleuthkitsleuthkit>= 0 < 2.09-12.09-1
sleuthkitsleuthkit>= 0 < 2.09-12.09-1
sleuthkitsleuthkit>= 0 < 2.09-12.09-1
the_sleuth_kitthe_sleuth_kit<= 2.08

CVSS provenance

nvd4.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv4.3MEDIUM