Lucene search

[email protected]CVE-2007-4787

HistorySep 10, 2007 - 9:17 p.m.

CVE-2007-4787

2007-09-1021:17:00

CWE-20

[email protected]

web.nvd.nist.gov

virus detection engine

sophos anti-virus

file processing

malware detection

cve-2007-4787

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.2%

JSON

The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.

Affected configurations

NVD

Node

sophosscanning_engineMatch2.30.4

sophossophos_anti-virusMatch3.4.6

sophossophos_anti-virusMatch3.78

sophossophos_anti-virusMatch3.78d

sophossophos_anti-virusMatch3.79

sophossophos_anti-virusMatch3.80

sophossophos_anti-virusMatch3.81

sophossophos_anti-virusMatch3.82

sophossophos_anti-virusMatch3.83

sophossophos_anti-virusMatch3.84

sophossophos_anti-virusMatch3.85

sophossophos_anti-virusMatch3.86

sophossophos_anti-virusMatch3.90

sophossophos_anti-virusMatch3.91

sophossophos_anti-virusMatch3.95

sophossophos_anti-virusMatch3.96

sophossophos_anti-virusMatch4.04

sophossophos_anti-virusMatch4.05

sophossophos_anti-virusMatch4.5.3

sophossophos_anti-virusMatch4.5.4

sophossophos_anti-virusMatch4.5.11

sophossophos_anti-virusMatch4.5.12

sophossophos_anti-virusMatch4.7.1

sophossophos_anti-virusMatch4.7.2

sophossophos_anti-virusMatch5.0.1

sophossophos_anti-virusMatch5.0.2

sophossophos_anti-virusMatch5.0.4

sophossophos_anti-virusMatch5.1

sophossophos_anti-virusMatch5.2.0

sophossophos_anti-virusMatch5.2.1

sophossophos_anti-virusMatch6.0

sophossophos_anti-virusMatch6.5

sophossophos_anti-virusMatch6.5.4_r2

sophossophos_anti-virusMatch6.5.8

sophossophos_anti-virusMatch7.0

CPENameOperatorVersion
sophos:scanning_enginesophos scanning engineeq2.30.4
sophos:sophos_anti-virussophos sophos anti-viruseq3.4.6
sophos:sophos_anti-virussophos sophos anti-viruseq3.78
sophos:sophos_anti-virussophos sophos anti-viruseq3.78d
sophos:sophos_anti-virussophos sophos anti-viruseq3.79
sophos:sophos_anti-virussophos sophos anti-viruseq3.80
sophos:sophos_anti-virussophos sophos anti-viruseq3.81
sophos:sophos_anti-virussophos sophos anti-viruseq3.82
sophos:sophos_anti-virussophos sophos anti-viruseq3.83
sophos:sophos_anti-virussophos sophos anti-viruseq3.84

CPE	Name	Operator	Version
sophos:scanning_engine	sophos scanning engine	eq	2.30.4
sophos:sophos_anti-virus	sophos sophos anti-virus	eq	3.4.6
sophos:sophos_anti-virus	sophos sophos anti-virus	eq	3.78
sophos:sophos_anti-virus	sophos sophos anti-virus	eq	3.78d
sophos:sophos_anti-virus	sophos sophos anti-virus	eq	3.79
sophos:sophos_anti-virus	sophos sophos anti-virus	eq	3.80
sophos:sophos_anti-virus	sophos sophos anti-virus	eq	3.81
sophos:sophos_anti-virus	sophos sophos anti-virus	eq	3.82
sophos:sophos_anti-virus	sophos sophos anti-virus	eq	3.83
sophos:sophos_anti-virus	sophos sophos anti-virus	eq	3.84

Rows per page:

1-10 of 351

References

osvdb.org/37988

secunia.com/advisories/26726

www.securityfocus.com/bid/25574

www.sophos.com/support/knowledgebase/article/29146.html

www.vupen.com/english/advisories/2007/3078

exchange.xforce.ibmcloud.com/vulnerabilities/36502

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.2%

JSON

Related for CVE-2007-4787

nvd1 prion1 cvelist1 nessus1