CVE-2007-4195

Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows...

4.3 MediumFix available

Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a denial of service (application crash) and prevent examination of certain ext2fs files via a malformed ext2fs image.

Exploit likelihood

2.13%Up 0.8 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2007-4195
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-4195
Updated: 2026-11-02

EUVDEUVD-2007-4178 No score

Record: EUVD-2007-4178
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5wgc-m4gw-p8m3 No score

Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows...

Record: GHSA-5wgc-m4gw-p8m3
Updated: 2026-11-02

OSV No score

Record: CVE-2007-4195
Updated: 2026-11-02

OSVDEBIAN-CVE-2007-4195 No score

Record: DEBIAN-CVE-2007-4195
Updated: 2026-11-02

Affected products

the sleuth kit sleuth kit

Affected packages

Affected packages
Package	Affected	Fixed
`sleuthkit` Debian:12	before 2.09-1	2.09-1
`sleuthkit` Debian:13	before 2.09-1	2.09-1
`sleuthkit` Debian:14	before 2.09-1	2.09-1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	affected, aliases, facts, references, title	GitHub Advisories, OSV
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-4195 is a medium vulnerability (CVSS 4.3) in The Sleuth Kit Sleuth Kit, published August 8, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.13%, the 82nd percentile. Fixed in sleuthkit 2.09-1.