PT-2009-2574 · Sophos+1 · Sophos Puremessage For Microsoft Exchange+1

Publicado 2009-08-27 · Atualizado 2017-08-17 · CVE-2008-7105

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sophos PureMessage for Microsoft Exchange version 3.0 before 3.0.2

Description The issue allows remote attackers to cause a denial of service, specifically the termination of EdgeTransport.exe, by sending a TNEF-encoded message with a crafted rich text body that is not properly handled during conversion to plain text.

Recommendations For Sophos PureMessage for Microsoft Exchange version 3.0 before 3.0.2, update to version 3.0.2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2008-7105

Produtos afetados

Exchange Server

Sophos Puremessage For Microsoft Exchange

Referências · 4

• http://securityfocus.com/bid/30881 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-7105 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52925 · Nota
• http://sophos.com/support/knowledgebase/article/44385.html · Aviso do Fabricante