CVE-2007-4037: Guidance Software Encase

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certain large offset. NOTE: the vendor disputes the significance of this issue, asserting that relevant attackers typically do not corrupt a filesystem, and indicating that the relevant read operation can be disabled

Affected products

Published 2007-07-27. Last modified 2026-06-16.