CVE-2007-4578

CVE-2007-4578 affects Sophos Anti-Virus for Windows and for Unix/Linux prior to 2.48.0. Vulnerability arises in handling of UPX-packed files due to an integer cast around, enabling a remote attacker to cause a crash (DoS) and, per some sources, potentially execute arbitrary code. Vendor note (as ...

CVE-2007-4787

CVE-2007-4787 affects Sophos Anti-Virus (prior to 2.49.0) where the virus detection engine fails to properly process malformed CAB, LZH, and RAR archives with modified headers, potentially allowing remote attackers to bypass malware detection. The vulnerability resides in the archive-processing l...

CVE-2007-4577

CVE-2007-4577 affects Sophos Anti-Virus for Unix/Linux prior to 2.48.0. A malformed BZip file can trigger an infinite loop, causing the Engine to create multiple temporary files and leading to a denial-of-service condition. The issue is triggered during processing of compressed input (BZip) and a...

CVE-2014-1213

CVE-2014-1213 affects Sophos Anti-Virus engine (SAVi) prior to 3.50.1 used in certain VDL/VDL-based builds. The root cause is failure to set ACLs on a set of global and session objects (e.g., DataUpdateRequest, multiple SAV-related mutexes/events such as ReadyForUpdateSAV-*, UpdateComplete, Updat...