Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sophos sophos anti-virus 3.91 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2005-2768
Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote malicious users to execute arbitrary code via a Visio file with a crafted sub record length.
Sophos Sophos Anti-virus 3.80Sophos Sophos Anti-virus 3.81Sophos Sophos Anti-virus 3.82Sophos Sophos Anti-virus 3.95Sophos Sophos Anti-virus 4.5.3Sophos Sophos Anti-virus 3.78dSophos Sophos Anti-virus 3.79Sophos Sophos Anti-virus 3.90Sophos Sophos Anti-virus 3.91Sophos Sophos Anti-virus 3.4.6Sophos Sophos Anti-virus 3.78Sophos Sophos Anti-virus 3.85Sophos Sophos Anti-virus 3.86Sophos Sophos Anti-virus 3.83Sophos Sophos Anti-virus 3.84Sophos Sophos Anti-virus 5.0.1Sophos Sophos Anti-virus 5.0.4
NA
CVE-2005-1530
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote malicious users to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.
Sophos Sophos Anti-virus 3.4.6Sophos Sophos Anti-virus 3.78Sophos Sophos Anti-virus 3.85Sophos Sophos Anti-virus 3.86Sophos Sophos Puremessage Anti-virus 4.6Sophos Sophos Small Business Suite 1.0Sophos Sophos Anti-virus 3.80Sophos Sophos Anti-virus 3.81Sophos Sophos Anti-virus 3.82Sophos Sophos Anti-virus 5.0.1Sophos Sophos Mailmonitor 2.0Sophos Sophos Anti-virus 3.83Sophos Sophos Anti-virus 3.84Sophos Sophos Mailmonitor 2.1Sophos Sophos Mailmonitor For Notes DominoSophos Sophos Anti-virus 3.78dSophos Sophos Anti-virus 3.79Sophos Sophos Anti-virus 3.90Sophos Sophos Anti-virus 3.91
NA
CVE-2007-4787
The virus detection engine in Sophos Anti-Virus prior to 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote malicious users to bypass malware detection.
Sophos Sophos Anti-virus 3.78Sophos Sophos Anti-virus 3.78dSophos Sophos Anti-virus 3.86Sophos Sophos Anti-virus 3.90Sophos Sophos Anti-virus 4.5.12Sophos Sophos Anti-virus 4.5.3Sophos Sophos Anti-virus 5.1Sophos Sophos Anti-virus 5.2.0Sophos Sophos Anti-virus 3.81Sophos Sophos Anti-virus 3.82Sophos Sophos Anti-virus 3.83Sophos Sophos Anti-virus 3.96Sophos Sophos Anti-virus 4.04Sophos Sophos Anti-virus 4.7.2Sophos Sophos Anti-virus 5.0.1Sophos Sophos Anti-virus 6.5.4 R2Sophos Sophos Anti-virus 6.5.8Sophos Sophos Anti-virus 3.79Sophos Sophos Anti-virus 3.80Sophos Sophos Anti-virus 3.91Sophos Sophos Anti-virus 3.95Sophos Sophos Anti-virus 4.5.4
NA
CVE-2010-2308
Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus prior to 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function.
Sophos Anti-virus 7.0.5Sophos Anti-virus 6.0.4Sophos Anti-virus 5.2.1Sophos Anti-virus 4.03Sophos Anti-virus 4.5.4Sophos Anti-virus 4.7.1Sophos Anti-virus 3.4.6Sophos Anti-virus 3.78Sophos Anti-virus 3.85Sophos Anti-virus 7.6Sophos Anti-virus 5.0.2Sophos Anti-virus 5.0.4Sophos Anti-virus 4.33.0Sophos Anti-virus 4.5.11Sophos Anti-virus 3.86Sophos Anti-virus 3.95Sophos Anti-virus 3.80Sophos Anti-virus 3.81Sophos Anti-virus 3.82Sophos Anti-virus 7.6.17Sophos Anti-virus 7.6.16Sophos Anti-virus 6.5
NA
CVE-2007-4577
Sophos Anti-Virus for Unix/Linux prior to 2.48.0 allows remote malicious users to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a "BZip bomb").
Sophos Anti-virus 3.78dSophos Anti-virus 3.79Sophos Anti-virus 3.86Sophos Anti-virus 3.90Sophos Anti-virus 4.5.12Sophos Anti-virus 4.5.3Sophos Anti-virus 5.0.9Sophos Small Business Suite 4.04Sophos Small Business Suite 4.05Sophos Anti-virus 3.82Sophos Anti-virus 3.83Sophos Anti-virus 3.96.0Sophos Anti-virus 4.03Sophos Anti-virus 4.7.2Sophos Anti-virus 5.0.1Sophos Anti-virus 5.2.1Sophos Anti-virus 6.5Sophos Anti-virus 3.80Sophos Anti-virus 3.81Sophos Anti-virus 3.91Sophos Anti-virus 3.95Sophos Anti-virus 4.5.4
NA
CVE-2007-4578
Sophos Anti-Virus for Windows and for Unix/Linux prior to 2.48.0 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vend...
Sophos Anti-virus 3.78Sophos Anti-virus 3.78dSophos Anti-virus 3.79Sophos Anti-virus 3.86Sophos Anti-virus 3.90Sophos Anti-virus 4.5.11Sophos Anti-virus 4.5.12Sophos Anti-virus 5.0.9Sophos Small Business Suite 4.04Sophos Small Business Suite 4.05Sophos Anti-virus 3.4.6Sophos Anti-virus 3.84Sophos Anti-virus 3.85Sophos Anti-virus 4.04Sophos Anti-virus 4.05Sophos Anti-virus 5.0.1Sophos Anti-virus 5.0.2Sophos Anti-virus 5.0.4Sophos Scanning Engine 2.30.4Sophos Scanning Engine 2.40.2Sophos Anti-virus 3.82Sophos Anti-virus 3.83
NA
CVE-2005-3382
Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote malicious users to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated a...
Sophos Sophos Anti-virus 3.91 Engine 2.28.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook