PT-2007-5927 · Sophos · Sophos Anti-Virus

Published 2007-09-10 · Updated 2017-07-29 · CVE-2007-4787

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Sophos Anti-Virus versions prior to 2.49.0

Description: The issue is related to the improper processing of malformed files by the virus detection engine. Specifically, it affects the handling of CAB, LZH, and RAR files with modified headers. This could potentially allow remote attackers to bypass malware detection.

Recommendations: For versions prior to 2.49.0, update to version 2.49.0 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-4787

Affected Products

Sophos Anti-Virus

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-4787 · Security Note
• http://sophos.com/support/knowledgebase/article/29146.html · Patch
• http://securityfocus.com/bid/25574 · Note
• http://vupen.com/english/advisories/2007/3078 · Note
• http://secunia.com/advisories/26726 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36502 · Note
• http://osvdb.org/37988 · Note