The fs_data_put_str function in ntfs.c in fls in Brian Carrier The Sleuth Kit (TSK) prior to 2.09 does not validate a certain length value, which allows user-assisted remote malicious users to cause a denial of service (application crash) and prevent examination of certain NTFS files via a malformed NTFS image, which triggers a buffer over-read.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
brian carrier the slueth kit |
Vulmon