PT-2005-3649 · Sophos · Sophos Anti-Virus

Alex Wheeler · Published 2005-09-02 · Updated 2017-07-11 · CVE-2005-2768

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sophos Antivirus (affected versions not specified)

Description A heap-based buffer overflow issue exists in the Sophos Antivirus Library, which is used by various Sophos products. This issue can be exploited by remote attackers to execute arbitrary code. The exploitation occurs through a Visio file that contains a crafted sub record length.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-2768

Affected Products

Sophos Anti-Virus

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-2768 · Security Note
• http://rem0te.com/public/images/sophos.pdf · Vendor Advisory
• http://secunia.com/advisories/16245 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=112511873420953&w=2 · Note
• http://securityfocus.com/bid/14362 · Note
• http://sophos.com/support/knowledgebase/article/3409.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21608 · Note