PT-2009-2574 · Sophos+1 · Sophos Puremessage For Microsoft Exchange+1

Published 2009-08-27 · Updated 2017-08-17 · CVE-2008-7105

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sophos PureMessage for Microsoft Exchange version 3.0 before 3.0.2

Description The issue allows remote attackers to cause a denial of service, specifically the termination of EdgeTransport.exe, by sending a TNEF-encoded message with a crafted rich text body that is not properly handled during conversion to plain text.

Recommendations For Sophos PureMessage for Microsoft Exchange version 3.0 before 3.0.2, update to version 3.0.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2008-7105

Affected Products

Exchange Server

Sophos Puremessage For Microsoft Exchange

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-7105 · Security Note
• http://sophos.com/support/knowledgebase/article/44385.html · Vendor Advisory
• http://securityfocus.com/bid/30881 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52925 · Note