Unscored severity · published Sep 29, 2014
CVE-2012-5619
The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which
–
CVSS
0.4%
EPSS
No
On KEV
Description
The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which . is not a reserved name, which allows local users to hide activities it more difficult to conduct forensics activities, as demonstrated by Flame.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
The Sleuth Kit · Sleuthkit
4.0.1 · source: NVD
Affected product
TS
The Sleuth Kit
Sleuthkit
More from The Sleuth Kit
9.8
CVE-2020-10232
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfs_istat() in fs/yaffs.c
9.8
CVE-2019-14532
An issue was discovered in The Sleuth Kit (TSK) 4.6.6
9.8
CVE-2019-14531
An issue was discovered in The Sleuth Kit (TSK) 4.6.6
9.1
CVE-2020-10233
In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c
8.1
CVE-2018-11740
An issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1