deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-3381
Published: 2007-08-07
Description: The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from the g_strsplit function, which allows local users to cause a denial of service (persistent daemon crash) via a crafted command to the daemon's socket, related to (1) gdm.c and (2) gdmconfig.c in daemon/, and (3) gdmconfig.c and (4) gdmflexiserver.c in gui/.
CVSS Score: 1.5 (LOW)
CWE: CWE-20
References: http://ftp.gnome.org/pub/GNOME/sources/gdm/2.14/gdm-2.14.13.news; http://ftp.gnome.org/pub/GNOME/sources/gdm/2.16/gdm-2.16.7.changes; http://ftp.gnome.org/pub/GNOME/sources/gdm/2.18/gdm-2.18.4.news
CVE: CVE-2007-4164
Published: 2007-08-07
Description: CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server Application Function (SAF) uses the url-prefix parameter and escape is disabled, or an Error directive uses the url-prefix parameter in obj.conf, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/26326; http://sunsolve.sun.com/search/document.do?assetkey=1-26-103003-1; http://www.securityfocus.com/bid/25190
CVE: CVE-2007-4165
Published: 2007-08-07
Description: Cross-site scripting (XSS) vulnerability in index.php in the Blue Memories theme 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757 and CVE-2007-4014.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/26345; http://www.osvdb.org/36603; http://www.securityfocus.com/bid/25215
CVE: CVE-2007-4166
Published: 2007-08-07
Description: Cross-site scripting (XSS) vulnerability in index.php in the Unnamed theme 1.217, and Special Edition (SE) 1.02, before 20070804 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757, CVE-2007-4014, and CVE-2007-4165.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/36604; http://secunia.com/advisories/26321; http://www.securityfocus.com/bid/25215
CVE: CVE-2007-4167
Published: 2007-08-07
Description: PHP remote file inclusion vulnerability in cat_viewed.php in AL-Caricatier 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the CatName parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/39254; http://securityreason.com/securityalert/2962; http://www.securityfocus.com/archive/1/475641/100/0/threaded
CVE: CVE-2007-4169
Published: 2007-08-07
Description: Multiple PHP remote file inclusion vulnerabilities in vgallite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dirpath parameter to _functions.php or the (2) lang parameter to index.php.  NOTE: CVE disputes vector 1 because the applicable include_once is located in a function that is not called on a direct request, and because $dirpath is an argument to this function.  CVE disputes vector 2 because "lang" is a constant string within an include_once, not a variable.  The researcher is also unreliable
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/46803; http://securityreason.com/securityalert/2963; http://www.securityfocus.com/archive/1/475643/100/0/threaded
CVE: CVE-2007-4170
Published: 2007-08-07
Description: Multiple PHP remote file inclusion vulnerabilities in AL-Athkar 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) include parameter to (a) Main.php and (b) get.php and the (2) exec parameter to (c) count.php.
CVSS Score: 10.0 (HIGH)
References: http://securityreason.com/securityalert/2964; http://www.securityfocus.com/archive/1/475646/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/35818
CVE: CVE-2007-4171
Published: 2007-08-07
Description: SQL injection vulnerability in komentar.php in the Forum Module for auraCMS (Modul Forum Sederhana) allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36432; http://secunia.com/advisories/26332; http://www.securityfocus.com/archive/1/475645/100/0/threaded
CVE: CVE-2007-4172
Published: 2007-08-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Webmail (OWM) 2.52 20060831 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) searchtype, (2) longpage, and (3) page parameters to (a) openwebmail-main.pl; the (4) prefs_caller, (5) userfirsttime, (6) page, (7) sort, (8) folder, and (9) message_id parameters to (b) openwebmail-prefs.pl; the (10) compose_caller, (11) msgdatetype, (12) keyword, (13) searchtype, (14) folder, (15) page, and (16) sort parameters to (c) openwebmail-send.pl; the (17) folder, (18) page, and (19) sort parameters to (d) openwebmail-folder.pl; the (20) searchtype, (21) page, (22) filesort, (23) singlepage, (24) showhidden, (25) showthumbnail, and (26) message_id parameters to (e) openwebmail-webdisk.pl; the (27) folder parameter to (f) openwebmail-advsearch.pl; and the (28) abookcollapse, (29) abooksearchtype, (30) abooksort, (31) abooklongpage, (32) abookpage, (33) message_id, (34) searchtype, (35) msgdatetype, (36) sort, (37) page, (38) rootxowmuid, and (39) listviewmode parameters to (g) openwebmail-abook.pl, different vectors than CVE-2005-2863, CVE-2006-2190, CVE-2006-3229, and CVE-2006-3233.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://pridels-team.blogspot.com/2007/08/openwebmail-multiple-xss-vuln.html; http://securityreason.com/securityalert/2965; http://www.securityfocus.com/bid/25175
CVE: CVE-2007-4173
Published: 2007-08-07
Description: SQL injection vulnerability in duyuruoku.asp in Hunkaray Okul Portali 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-3080.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/36272; http://secunia.com/advisories/26323; http://securityreason.com/securityalert/2966
CVE: CVE-2007-4174
Published: 2007-08-07
Description: Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers to modify the torrc configuration file, compromise anonymity, and have other unspecified impact via HTTP POST data containing commands without valid authentication, as demonstrated by an HTML form (1) hosted on a web site or (2) injected by a Tor exit node.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://archives.seul.org/or/announce/Aug-2007/msg00000.html; http://archives.seul.org/or/announce/Sep-2007/msg00000.html; http://osvdb.org/36271
CVE: CVE-2007-2927
Published: 2007-08-08
Description: Unspecified vulnerability in Atheros 802.11 a/b/g wireless adapter drivers before 5.3.0.35, and 6.x before 6.0.3.67, on Windows allows remote attackers to cause a denial of service via a crafted 802.11 management frame.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/37992; http://secunia.com/advisories/26348; http://www.kb.cert.org/vuls/id/730169
CVE: CVE-2007-3108
Published: 2007-08-08
Description: The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.
CVSS Score: 1.2 (LOW)
References: http://cvs.openssl.org/chngview?cn=16275; http://lists.vmware.com/pipermail/security-announce/2008/000002.html; http://openssl.org/news/patch-CVE-2007-3108.txt
CVE: CVE-2007-3384
Published: 2007-08-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Value field, related to error messages.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/39035; http://securityreason.com/securityalert/2971; http://securitytracker.com/id?1018503
CVE: CVE-2007-3844
Published: 2007-08-08
Description: Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascript: or (2) data: link into an about:blank document loaded by chrome via (a) the window.open function or (b) a content.location assignment, aka "Cross Context Scripting." NOTE: this issue is caused by a CVE-2007-3089 regression.
CVSS Score: 4.3 (MEDIUM)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=388121; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579
CVE: CVE-2007-3845
Published: 2007-08-08
Description: Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant of CVE-2007-4041.  NOTE: the vendor states that "it is still possible to launch a filetype handler based on extension rather than the registered protocol handler."
CVSS Score: 9.3 (HIGH)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=389580; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00774579
CVE: CVE-2007-4175
Published: 2007-08-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in OpenRat CMS 0.8-beta1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) subaction and (2) action parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels-team.blogspot.com/2007/08/openrat-vuln.html; http://www.securityfocus.com/bid/25169; https://exchange.xforce.ibmcloud.com/vulnerabilities/35748
CVE: CVE-2007-4176
Published: 2007-08-08
Description: Multiple unspecified vulnerabilities in EQDKP Plus before 0.4.4.5 have unknown impact and attack vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/26267; http://sourceforge.net/project/shownotes.php?release_id=528450&group_id=167016; http://www.securityfocus.com/bid/25172
CVE: CVE-2007-4177
Published: 2007-08-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in Interact before 2.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: this might overlap CVE-2007-3328.
CVSS Score: 4.3 (MEDIUM)
References: http://cce-interact.cvs.sourceforge.net/cce-interact/Interact/includes/common.inc.php?r1=1.259&r2=1.260; http://osvdb.org/36440; http://secunia.com/advisories/26304
CVE: CVE-2007-4178
Published: 2007-08-08
Description: Cross-site scripting (XSS) vulnerability in index.php in WebDirector 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the deslocal parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36439; http://pridels-team.blogspot.com/2007/08/webdirector-xss-vuln.html; http://secunia.com/advisories/26315
CVE: CVE-2007-4179
Published: 2007-08-08
Description: Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors.  NOTE: this is probably different from CVE-2007-0916, but this is not certain due to lack of vendor details.
CVSS Score: 1.5 (LOW)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01090656; http://secunia.com/advisories/26279; http://www.securityfocus.com/bid/25165
CVE: CVE-2007-4180
Published: 2007-08-08
Description: Directory traversal vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows remote attackers to read arbitrary local files via a .. (dot dot) in the file parameter.  NOTE: CVE and a reliable third party dispute this vulnerability because the code uses a fixed argument when invoking fputs, which cannot be used to read files
CVSS Score: 5.0 (MEDIUM)
References: http://outlaw.aria-security.info/?p=12; http://securityreason.com/securityalert/2973; http://www.attrition.org/pipermail/vim/2007-August/001752.html
CVE: CVE-2007-4181
Published: 2007-08-08
Description: PHP remote file inclusion vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter.  NOTE: A reliable third party disputes this vulnerability because the applicable include is within a function that does not receive the dir parameter from an HTTP request
CVSS Score: 6.8 (MEDIUM)
References: http://outlaw.aria-security.info/?p=12; http://securityreason.com/securityalert/2973; http://www.attrition.org/pipermail/vim/2007-August/001752.html
CVE: CVE-2007-4182
Published: 2007-08-08
Description: Unrestricted file upload vulnerability in index.php in WikiWebWeaver 1.1 and earlier allows remote attackers to upload and execute arbitrary PHP code via an upload action specifying a filename with a double extension such as .gif.php, which is accessible from data/documents/.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2972; http://www.securityfocus.com/archive/1/475242/100/0/threaded; http://www.securityfocus.com/bid/25164
CVE: CVE-2007-4183
Published: 2007-08-08
Description: SQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/25178; https://exchange.xforce.ibmcloud.com/vulnerabilities/35758; https://www.exploit-db.com/exploits/4253
CVE: CVE-2007-4184
Published: 2007-08-08
Description: SQL injection vulnerability in administrator/popups/pollwindow.php in Joomla! 1.0.12 allows remote attackers to execute arbitrary SQL commands via the pollid parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/475066/100/0/threaded; http://www.securityfocus.com/archive/1/480738/100/0/threaded; http://www.securityfocus.com/archive/1/480757/100/0/threaded
CVE: CVE-2007-4185
Published: 2007-08-08
Description: Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) OutputFilter.php, (3) OutputCache.php, (4) Modifier.php, (5) Reader.php, and (6) TemplateCache.php in includes/patTemplate/patTemplate/; (7) includes/Cache/Lite/Output.php; and other unspecified components, which reveal the path in various error messages.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/39037; http://osvdb.org/39038; http://osvdb.org/39039
CVE: CVE-2007-4186
Published: 2007-08-08
Description: PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/39059; http://securityreason.com/securityalert/2979; http://www.securityfocus.com/archive/1/475356/100/0/threaded
CVE: CVE-2007-4187
Published: 2007-08-08
Description: Multiple eval injection vulnerabilities in the com_search component in Joomla! 1.5 beta before RC1 (aka Mapya) allow remote attackers to execute arbitrary PHP code via PHP sequences in the searchword parameter, related to default_results.php in (1) components/com_search/views/search/tmpl/ and (2) templates/beez/html/com_search/search/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://joomlacode.org/gf/project/joomla/scmsvn/?action=browse&path=%2Fdevelopment%2Ftrunk%2Fcomponents%2Fcom_search%2Fviews%2Fsearch%2Fview.php&r1=7455&r2=7456; http://osvdb.org/41260; http://securityreason.com/securityalert/2969
CVE: CVE-2007-4188
Published: 2007-08-08
Description: Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to hijack administrative web sessions via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-384
References: http://secunia.com/advisories/26239; http://www.joomla.org/content/view/3677/1/; http://www.securityfocus.com/archive/1/476017/100/0/threaded
CVE: CVE-2007-4189
Published: 2007-08-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the (1) com_search, (2) com_content, and (3) mod_login components.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/38755; http://osvdb.org/38756; http://osvdb.org/38757
CVE: CVE-2007-4190
Published: 2007-08-08
Description: CRLF injection vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and probably conduct HTTP response splitting attacks via CRLF sequences in the url parameter.  NOTE: this can be leveraged for cross-site scripting (XSS) attacks.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-74
References: http://osvdb.org/38739; http://secunia.com/advisories/26239; http://www.joomla.org/content/view/3677/1/
CVE: CVE-2007-4191
Published: 2007-08-08
Description: Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying PAVSRV51.EXE or other unspecified files, a related issue to CVE-2006-4657.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/26336; http://securityreason.com/securityalert/2968; http://www.pandasecurity.com/homeusers/support/card?id=41111&idIdioma=2&ref=PAV08Dev
CVE: CVE-2007-4192
Published: 2007-08-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in IDE Group DVD Rental System (DRS) 5.1 before 20070801 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application service provider. If so, then this issue should not be included in CVE.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-08/0020.html; http://osvdb.org/39522; http://secunia.com/advisories/26310
CVE: CVE-2007-4193
Published: 2007-08-08
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in IDE Group DVD Rental System (DRS) 5.1 before 20070801 allow remote attackers to perform certain actions as arbitrary users, as demonstrated by (1) modifying data or (2) canceling a subscription. NOTE: it is not clear whether IDE Group updates all DRS installations in its role as an application service provider. If so, then this issue should not be included in CVE.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-08/0020.html; http://osvdb.org/39523; http://secunia.com/advisories/26310
CVE: CVE-2007-4194
Published: 2007-08-08
Description: Guidance Software EnCase 5.0 allows user-assisted remote attackers to cause a denial of service (stack memory consumption) and possibly have other unspecified impact via a malformed file, related to "EnCase's file system parsing." NOTE: this information is based upon a vague pre-advisory. It might overlap CVE-2007-4036.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/44739; http://securityreason.com/securityalert/2967; http://www.securityfocus.com/archive/1/474811/100/0/threaded
CVE: CVE-2007-4195
Published: 2007-08-08
Description: Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain ext2fs files via a malformed ext2fs image.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/47000; http://sourceforge.net/mailarchive/message.php?msg_name=A19F11EF-13CA-4940-AFF3-9BE08F67EE22%40sleuthkit.org; http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE: CVE-2007-4196
Published: 2007-08-08
Description: icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 misinterprets a certain memory location as the holder of a loop iteration count, which allows user-assisted remote attackers to cause a denial of service (long loop) and prevent examination of certain NTFS files via a malformed NTFS image.
CVSS Score: 4.3 (MEDIUM)
References: http://sourceforge.net/mailarchive/message.php?msg_name=A19F11EF-13CA-4940-AFF3-9BE08F67EE22%40sleuthkit.org; http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf; http://www.securityfocus.com/archive/1/474809/100/0/threaded
CVE: CVE-2007-4197
Published: 2007-08-08
Description: icat in Brian Carrier The Sleuth Kit (TSK) before 2.09 omits NULL pointer checks in certain code paths, which allows user-assisted remote attackers to cause a denial of service (NULL dereference and application crash) and prevent examination of certain NTFS files via a malformed NTFS image.
CVSS Score: 4.3 (MEDIUM)
References: http://sourceforge.net/mailarchive/message.php?msg_name=A19F11EF-13CA-4940-AFF3-9BE08F67EE22%40sleuthkit.org; http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf; http://www.securityfocus.com/archive/1/474809/100/0/threaded
CVE: CVE-2007-4198
Published: 2007-08-08
Description: The fs_data_put_str function in ntfs.c in fls in Brian Carrier The Sleuth Kit (TSK) before 2.09 does not validate a certain length value, which allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image, which triggers a buffer over-read.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/46998; http://sourceforge.net/mailarchive/message.php?msg_name=A19F11EF-13CA-4940-AFF3-9BE08F67EE22%40sleuthkit.org; http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE: CVE-2007-4199
Published: 2007-08-08
Description: Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image that triggers (1) dereference of a certain integer value by ntfs_dent.c in fls, or (2) dereference of a certain other integer value by ntfs.c in fsstat.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/46997; http://sourceforge.net/mailarchive/message.php?msg_name=A19F11EF-13CA-4940-AFF3-9BE08F67EE22%40sleuthkit.org; http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf
CVE: CVE-2007-4200
Published: 2007-08-08
Description: ntfs.c in fsstat in Brian Carrier The Sleuth Kit (TSK) before 2.09 interprets a certain variable as a byte count rather than a count of 32-bit integers, which allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/46996; http://sourceforge.net/mailarchive/message.php?msg_name=A19F11EF-13CA-4940-AFF3-9BE08F67EE22%40sleuthkit.org; http://www.isecpartners.com/files/iSEC-Breaking_Forensics_Software-Paper.v1_1.BH2007.pdf