CVE-2007-4037 Memory corruption in n/a

Medium 4.3 Published 27 Jul 2007 Updated 7 Aug 2024

A user-assisted attacker can cause a crash in EnCase by providing a malformed NTFS filesystem image, leading to a buffer over-read.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2007-4037?

CVE-2007-4037 is a medium-severity memory corruption vulnerability in n/a, published on 27 Jul 2007. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certain large offset. NOTE: the vendor disputes the significance of this issue, asserting that relevant attackers typically do not corrupt a filesystem, and indicating that the relevant read operation can be disabled

Weakness: CWE-119

Which versions are affected by CVE-2007-4037?

It affects 1 product.

Products include Guidance Software Encase.

How do I fix CVE-2007-4037?

No fix has been published for CVE-2007-4037 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2007-4037 being exploited?

There is no known exploitation of CVE-2007-4037 in the wild and no public exploit code.

Sources

Also known as GHSA-8hqf-m7vp-fcgv.