First published: Wed Aug 08 2007(Updated: )
Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain ext2fs files via a malformed ext2fs image.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
The Sleuth Kit | <=2.08 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-4195 has a medium severity rating due to its potential to cause denial of service by crashing the application.
To fix CVE-2007-4195, upgrade to The Sleuth Kit version 2.09 or later, which addresses the use-after-free vulnerability.
The potential impacts of CVE-2007-4195 include application crashes and the inability to examine certain ext2fs files.
Users of The Sleuth Kit version 2.08 and earlier are affected by CVE-2007-4195.
Yes, CVE-2007-4195 can be exploited by remote attackers with user assistance through a malformed ext2fs image.