Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x prior to 6.5.8 and 7.x prior to 7.0.1 allows remote malicious users to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
sophos anti-virus |