CVE-2007-4578

CVE-2007-4578 affects Sophos Anti-Virus for Windows and for Unix/Linux prior to 2.48.0. Vulnerability arises in handling of UPX-packed files due to an integer cast around, enabling a remote attacker to cause a crash (DoS) and, per some sources, potentially execute arbitrary code. Vendor note (as ...

CVE-2004-0552

Sophos Small Business Suite 1.00 on Windows is affected by CVE-2004-0552. The issue arises when files or directories use reserved MS-DOS device names (e.g., AUX, CON, PRN, LPT1, COM1); such names can cause the scanner to bypass detection or fail to detect/exploit in real time. The vulnerability c...

CVE-2007-4577

CVE-2007-4577 affects Sophos Anti-Virus for Unix/Linux prior to 2.48.0. A malformed BZip file can trigger an infinite loop, causing the Engine to create multiple temporary files and leading to a denial-of-service condition. The issue is triggered during processing of compressed input (BZip) and a...