CVE-2007-4035

Guidance Software EnCase does not properly handle (1) certain malformed MBR partition tables with many entries, which allows remote attackers to prevent logical collection of a disk image; (2) NTFS filesystems with directory loops, which allows remote attackers to prevent examination of certain directory contents; and (3) certain other malformed NTFS filesystems, which allows remote attackers to prevent examination of corrupted records. NOTE: the vendor disputes the significance of these issues, because physical collection can be used instead, because the vendor believes that relevant attackers typically do not corrupt an MBR or a filesystem, and because detection of a loop is valuable on its own

Score
CVSS 2.0 5.0 Medium
Status
Modified - cve@mitre.org
Published
2007-07-27
Last modified
2024-08-07

Affected products

References

 
 
© AVABIS GmbH privacypolicy about