Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sophos anti-virus 3.4.6 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-2088
Sophos Anti-Virus 3.78 allows remote malicious users to bypass virus scanning by using a qmail generated Delivery Status Notification (DSN) where the original email is not included in the bounce message.
Sophos Sophos Anti-virus 3.4.6Sophos Sophos Anti-virus 3.78
NA
CVE-2005-2768
Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote malicious users to execute arbitrary code via a Visio file with a crafted sub record length.
Sophos Sophos Anti-virus 3.80Sophos Sophos Anti-virus 3.81Sophos Sophos Anti-virus 3.82Sophos Sophos Anti-virus 3.95Sophos Sophos Anti-virus 4.5.3Sophos Sophos Anti-virus 3.78dSophos Sophos Anti-virus 3.79Sophos Sophos Anti-virus 3.90Sophos Sophos Anti-virus 3.91Sophos Sophos Anti-virus 3.4.6Sophos Sophos Anti-virus 3.78Sophos Sophos Anti-virus 3.85Sophos Sophos Anti-virus 3.86Sophos Sophos Anti-virus 3.83Sophos Sophos Anti-virus 3.84Sophos Sophos Anti-virus 5.0.1Sophos Sophos Anti-virus 5.0.4
NA
CVE-2010-2308
Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus prior to 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.
Sophos Anti-virus 7.0.5Sophos Anti-virus 6.0.4Sophos Anti-virus 5.2.1Sophos Anti-virus 4.03Sophos Anti-virus 4.5.4Sophos Anti-virus 4.7.1Sophos Anti-virus 3.4.6Sophos Anti-virus 3.78Sophos Anti-virus 3.85Sophos Anti-virus 7.6Sophos Anti-virus 5.0.2Sophos Anti-virus 5.0.4Sophos Anti-virus 4.33.0Sophos Anti-virus 4.5.11Sophos Anti-virus 3.86Sophos Anti-virus 3.95Sophos Anti-virus 3.80Sophos Anti-virus 3.81Sophos Anti-virus 3.82Sophos Anti-virus 7.6.17Sophos Anti-virus 7.6.16Sophos Anti-virus 6.5
NA
CVE-2007-4787
The virus detection engine in Sophos Anti-Virus prior to 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote malicious users to bypass malware detection.
Sophos Sophos Anti-virus 3.78Sophos Sophos Anti-virus 3.78dSophos Sophos Anti-virus 3.86Sophos Sophos Anti-virus 3.90Sophos Sophos Anti-virus 4.5.12Sophos Sophos Anti-virus 4.5.3Sophos Sophos Anti-virus 5.1Sophos Sophos Anti-virus 5.2.0Sophos Sophos Anti-virus 3.81Sophos Sophos Anti-virus 3.82Sophos Sophos Anti-virus 3.83Sophos Sophos Anti-virus 3.96Sophos Sophos Anti-virus 4.04Sophos Sophos Anti-virus 4.7.2Sophos Sophos Anti-virus 5.0.1Sophos Sophos Anti-virus 6.5.4 R2Sophos Sophos Anti-virus 6.5.8Sophos Sophos Anti-virus 3.79Sophos Sophos Anti-virus 3.80Sophos Sophos Anti-virus 3.91Sophos Sophos Anti-virus 3.95Sophos Sophos Anti-virus 4.5.4
NA
CVE-2005-1530
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote malicious users to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.
Sophos Sophos Anti-virus 3.4.6Sophos Sophos Anti-virus 3.78Sophos Sophos Anti-virus 3.85Sophos Sophos Anti-virus 3.86Sophos Sophos Puremessage Anti-virus 4.6Sophos Sophos Small Business Suite 1.0Sophos Sophos Anti-virus 3.80Sophos Sophos Anti-virus 3.81Sophos Sophos Anti-virus 3.82Sophos Sophos Anti-virus 5.0.1Sophos Sophos Mailmonitor 2.0Sophos Sophos Anti-virus 3.83Sophos Sophos Anti-virus 3.84Sophos Sophos Mailmonitor 2.1Sophos Sophos Mailmonitor For Notes DominoSophos Sophos Anti-virus 3.78dSophos Sophos Anti-virus 3.79Sophos Sophos Anti-virus 3.90Sophos Sophos Anti-virus 3.91
NA
CVE-2007-4577
Sophos Anti-Virus for Unix/Linux prior to 2.48.0 allows remote malicious users to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a "BZip bomb").
Sophos Anti-virus 3.78dSophos Anti-virus 3.79Sophos Anti-virus 3.86Sophos Anti-virus 3.90Sophos Anti-virus 4.5.12Sophos Anti-virus 4.5.3Sophos Anti-virus 5.0.9Sophos Small Business Suite 4.04Sophos Small Business Suite 4.05Sophos Anti-virus 3.82Sophos Anti-virus 3.83Sophos Anti-virus 3.96.0Sophos Anti-virus 4.03Sophos Anti-virus 4.7.2Sophos Anti-virus 5.0.1Sophos Anti-virus 5.2.1Sophos Anti-virus 6.5Sophos Anti-virus 3.80Sophos Anti-virus 3.81Sophos Anti-virus 3.91Sophos Anti-virus 3.95Sophos Anti-virus 4.5.4
NA
CVE-2007-4578
Sophos Anti-Virus for Windows and for Unix/Linux prior to 2.48.0 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vend...
Sophos Anti-virus 3.78Sophos Anti-virus 3.78dSophos Anti-virus 3.79Sophos Anti-virus 3.86Sophos Anti-virus 3.90Sophos Anti-virus 4.5.11Sophos Anti-virus 4.5.12Sophos Anti-virus 5.0.9Sophos Small Business Suite 4.04Sophos Small Business Suite 4.05Sophos Anti-virus 3.4.6Sophos Anti-virus 3.84Sophos Anti-virus 3.85Sophos Anti-virus 4.04Sophos Anti-virus 4.05Sophos Anti-virus 5.0.1Sophos Anti-virus 5.0.2Sophos Anti-virus 5.0.4Sophos Scanning Engine 2.30.4Sophos Scanning Engine 2.40.2Sophos Anti-virus 3.82Sophos Anti-virus 3.83
NA
CVE-2004-0932
McAfee Anti-Virus Engine DATS drivers prior to 4398 released on Oct 13th 2004 and DATS Driver prior to 4397 October 6th 2004 allows remote malicious users to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent t...
Archive Zip Archive Zip 1.13Broadcom Etrust Ez Antivirus 6.2Broadcom Etrust Ez Antivirus 6.3Broadcom Etrust Secure Content Manager 1.0Ca Etrust Secure Content Manager 1.0Kaspersky Lab Kaspersky Anti-virus 4.0Kaspersky Lab Kaspersky Anti-virus 5.0Sophos Sophos Anti-virus 3.79Sophos Sophos Anti-virus 3.80Sophos Sophos Puremessage Anti-virus 4.6Sophos Sophos Small Business Suite 1.0Broadcom Etrust Antivirus Gateway 7.1Broadcom Etrust Ez Antivirus 6.1Broadcom Etrust Intrusion Detection 1.4.5Broadcom Etrust Intrusion Detection 1.5Eset Software Nod32 Antivirus 1.0.13Kaspersky Lab Kaspersky Anti-virus 3.0Sophos Sophos Anti-virus 3.78Sophos Sophos Anti-virus 3.78dSophos Sophos Anti-virus 3.85Sophos Sophos Anti-virus 3.86Broadcom Brightstor Arcserve Backup 11.1
NA
CVE-2004-0933
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 up to and including 2.4, and EZ-Antivirus 6.1 up to and including 6.3 allow remote...
Archive Zip Archive Zip 1.13Broadcom Etrust Ez Antivirus 6.2Broadcom Etrust Ez Antivirus 6.3Broadcom Etrust Secure Content Manager 1.0Ca Etrust Secure Content Manager 1.0Kaspersky Lab Kaspersky Anti-virus 4.0Kaspersky Lab Kaspersky Anti-virus 5.0Mcafee Antivirus Engine 4.3.20Sophos Sophos Anti-virus 3.79Sophos Sophos Anti-virus 3.80Sophos Sophos Puremessage Anti-virus 4.6Sophos Sophos Small Business Suite 1.0Broadcom Etrust Antivirus Gateway 7.1Broadcom Etrust Ez Antivirus 6.1Broadcom Etrust Intrusion Detection 1.4.5Broadcom Etrust Intrusion Detection 1.5Eset Software Nod32 Antivirus 1.0.13Kaspersky Lab Kaspersky Anti-virus 3.0Sophos Sophos Anti-virus 3.78Sophos Sophos Anti-virus 3.78dSophos Sophos Anti-virus 3.85Sophos Sophos Anti-virus 3.86
NA
CVE-2004-0934
Kaspersky 3.x to 4.x allows remote malicious users to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Archive Zip Archive Zip 1.13Broadcom Brightstor Arcserve Backup 11.1Broadcom Etrust Ez Antivirus 6.2Broadcom Etrust Ez Antivirus 6.3Broadcom Etrust Secure Content Manager 1.0Ca Etrust Secure Content Manager 1.0Broadcom Etrust Antivirus Gateway 7.1Broadcom Etrust Ez Antivirus 6.1Broadcom Etrust Intrusion Detection 1.4.5Broadcom Etrust Intrusion Detection 1.5Kaspersky Lab Kaspersky Anti-virus 3.0Kaspersky Lab Kaspersky Anti-virus 4.0Sophos Sophos Anti-virus 3.78Sophos Sophos Anti-virus 3.78dSophos Sophos Anti-virus 3.85Sophos Sophos Anti-virus 3.86Broadcom Etrust Antivirus 7.0Ca Etrust Antivirus 7.0 Sp2Broadcom Etrust Ez Armor 2.0Broadcom Etrust Ez Armor 2.3Broadcom Etrust Secure Content Manager 1.1Broadcom Inoculateit 6.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook