CVE-2007-4198

Publication date 8 August 2007

Last updated 24 July 2024

Ubuntu priority

Negligible

Why this priority?

Description

The fs_data_put_str function in ntfs.c in fls in Brian Carrier The Sleuth Kit (TSK) before 2.09 does not validate a certain length value, which allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image, which triggers a buffer over-read.

Status

Package Ubuntu Release Status
sleuthkit 9.10 karmic
Fixed 2.09-1
9.04 jaunty
Fixed 2.09-1
8.10 intrepid
Fixed 2.09-1
8.04 LTS hardy
Fixed 2.09-1
7.10 gutsy Ignored end of life, was needed
7.04 feisty Ignored end of life, was needed
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life

References

Other references

Access our resources on patching vulnerabilities