CVE-2007-4036 Denial of service in n/a
Remote attackers can crash Guidance Software EnCase by providing corrupted files or deeply nested directories, requiring user interaction to open the malicious content.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2007-4036?
CVE-2007-4036 is a medium-severity denial of service vulnerability in n/a, published on 27 Jul 2007. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Guidance Software EnCase allows user-assisted remote attackers to cause a denial of service via (1) a corrupted Microsoft Exchange database, which triggers an application crash when many options are selected; (2) a corrupted NTFS filesystem, which causes the application to report "memory allocation errors;" or (3) deeply nested directories, which trigger an application crash during an Expand All action. NOTE: the vendor disputes the significance of these vectors because the user can select fewer options, there is no operational impact, or the user can do less expansion
Weakness: CWE-399
Which versions are affected by CVE-2007-4036?
It affects 1 product.
Products include Guidance Software Encase.
How do I fix CVE-2007-4036?
No fix has been published for CVE-2007-4036 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2007-4036 being exploited?
There is no known exploitation of CVE-2007-4036 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-wjj2-66hj-pmf6.