CVE-2008-7105

CVE-2008-7105 affects Sophos PureMessage for Microsoft Exchange 3.0, prior to version 3.0.2. A crafted TNEF-encoded message with a rich-text body can cause EdgeTransport.exe termination (DoS) by improper handling during conversion to plain text. This follows related notes to CVE-2008-7104, which ...

CVE-2008-7106

The installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti-virus and anti-spam are supported, does not create or launch the associated scan engines when the system is under heavy load, which has unspecified impact, probably remote bypass of scanner protection o...

CVE-2008-7104

Sophos PureMessage for Microsoft Exchange 3.0 (before 3.0.2) is affected via PMScanner.exe in PureMessage for Exchange, where a crafted RTF or PDF file can cause a denial of service (message queue delay and incomplete spam rule update). CVE-2008-7104 details this vulnerability; CVE-2008-7105 desc...

CVE-2008-7105: Undefined Security Weakness

Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service EdgeTransport.exe termination via a TNEF-encoded message with a crafted rich text body that is not properly handled during conversion to plain text. NOTE: this might be related to...

CVE-2008-7106: Undefined Security Weakness

The installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti-virus and anti-spam are supported, does not create or launch the associated scan engines when the system is under heavy load, which has unspecified impact, probably remote bypass of scanner protection o...

CVE-2008-7104: Undefined Security Weakness

Sophos PureMessage Scanner service PMScanner.exe in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service message queue delay and incomplete spam rule update via a crafted 1 RTF or 2 PDF file...

PureMessage for Microsoft Exchange RTF远程拒绝服务漏洞

BUGTRAQ ID:30881 CNCAN ID：CNCAN-2008082907 PureMessage for Microsoft Exchange是一款针对Microsoft Exchange邮件服务器的垃圾邮件防护软件。 PureMessage for Microsoft Exchange处理RTF存在问题，远程攻击者可以利用漏洞使应用程序崩溃，造成拒绝服务攻击。 -对RTF或PDF文件执行内容扫描时可导致PureMessage扫描服务PMScanner.exe终止或挂起，导致消息积存在队列中或SPAM规则更新不能完成。 -在Exchange...

Sophos PureMessage < 3.0.2 Multiple Vulnerabilities

The remote host is running Sophos PureMessage for Microsoft Exchange. The installed version of the software is affected by multiple vulnerabilities. - A vulnerability in PMScanner.exe could crash or hang the PureMessage Scanner service while processing certain rich text RTF or PDF files. - A...

CVE-2005-2768

The CVE-2005-2768 entry has concrete details in connected advisories: Sophos Anti-Virus contains a heap-based buffer overflow in the Visio file parsing/handling code of the Visio scanner component. The vulnerability arises from insufficient boundary verification of user-supplied data, allowing a ...

CVE-2005-2768: Undefined Security Weakness

Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote attackers to execute arbitrary code via a Visio file with a crafted sub record length...