PT-2007-5927 · Sophos · Sophos Anti-Virus

Publicado 2007-09-10 · Atualizado 2017-07-29 · CVE-2007-4787

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Sophos Anti-Virus versions prior to 2.49.0

Description: The issue is related to the improper processing of malformed files by the virus detection engine. Specifically, it affects the handling of CAB, LZH, and RAR files with modified headers. This could potentially allow remote attackers to bypass malware detection.

Recommendations: For versions prior to 2.49.0, update to version 2.49.0 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-4787

Produtos afetados

Sophos Anti-Virus

Referências · 7

• http://securityfocus.com/bid/25574 · Nota
• http://vupen.com/english/advisories/2007/3078 · Nota
• http://secunia.com/advisories/26726 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4787 · Nota de Segurança
• http://sophos.com/support/knowledgebase/article/29146.html · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36502 · Nota
• http://osvdb.org/37988 · Nota