PT-2005-3649 · Sophos · Sophos Anti-Virus

Alex Wheeler · Publicado 2005-09-02 · Atualizado 2017-07-11 · CVE-2005-2768

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sophos Antivirus (affected versions not specified)

Description A heap-based buffer overflow issue exists in the Sophos Antivirus Library, which is used by various Sophos products. This issue can be exploited by remote attackers to execute arbitrary code. The exploitation occurs through a Visio file that contains a crafted sub record length.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-2768

Produtos afetados

Sophos Anti-Virus

Referências · 7

• http://marc.info/?l=bugtraq&m=112511873420953&w=2 · Nota
• http://securityfocus.com/bid/14362 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2768 · Nota de Segurança
• http://sophos.com/support/knowledgebase/article/3409.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21608 · Nota
• http://rem0te.com/public/images/sophos.pdf · Aviso do Fabricante
• http://secunia.com/advisories/16245 · Aviso do Fabricante