Sophos Anti-Virus 5.0.1, with Scan inside archive files enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large Extra field length value.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sophos_anti-virus | Sophos | 3.4.6 (including) | 3.4.6 (including) |
| Sophos_anti-virus | Sophos | 3.78 (including) | 3.78 (including) |
| Sophos_anti-virus | Sophos | 3.78d (including) | 3.78d (including) |
| Sophos_anti-virus | Sophos | 3.79 (including) | 3.79 (including) |
| Sophos_anti-virus | Sophos | 3.80 (including) | 3.80 (including) |
| Sophos_anti-virus | Sophos | 3.81 (including) | 3.81 (including) |
| Sophos_anti-virus | Sophos | 3.82 (including) | 3.82 (including) |
| Sophos_anti-virus | Sophos | 3.83 (including) | 3.83 (including) |
| Sophos_anti-virus | Sophos | 3.84 (including) | 3.84 (including) |
| Sophos_anti-virus | Sophos | 3.85 (including) | 3.85 (including) |
| Sophos_anti-virus | Sophos | 3.86 (including) | 3.86 (including) |
| Sophos_anti-virus | Sophos | 3.90 (including) | 3.90 (including) |
| Sophos_anti-virus | Sophos | 3.91 (including) | 3.91 (including) |
| Sophos_anti-virus | Sophos | 5.0.1 (including) | 5.0.1 (including) |
| Sophos_mailmonitor | Sophos | 2.0 (including) | 2.0 (including) |
| Sophos_mailmonitor | Sophos | 2.1 (including) | 2.1 (including) |
| Sophos_mailmonitor_for_notes_domino | Sophos | * | * |
| Sophos_puremessage_anti-virus | Sophos | 4.6 (including) | 4.6 (including) |
| Sophos_small_business_suite | Sophos | 1.0 (including) | 1.0 (including) |
References
- http://securitytracker.com/id?1014488
- http://www.idefense.com/application/poi/display?id=283\u0026type=vulnerabilities\u0026flashstatus=true
- http://www.securityfocus.com/bid/14270
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21373
- http://securitytracker.com/id?1014488
- http://www.idefense.com/application/poi/display?id=283\u0026type=vulnerabilities\u0026flashstatus=true
- http://www.securityfocus.com/bid/14270
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21373