Sophos Anti-Virus 5.0.1, with Scan inside archive files enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large Extra field length value.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sophos_anti-virus | Sophos | 3.4.6 (including) | 3.4.6 (including) |
| Sophos_anti-virus | Sophos | 3.78 (including) | 3.78 (including) |
| Sophos_anti-virus | Sophos | 3.78d (including) | 3.78d (including) |
| Sophos_anti-virus | Sophos | 3.79 (including) | 3.79 (including) |
| Sophos_anti-virus | Sophos | 3.80 (including) | 3.80 (including) |
| Sophos_anti-virus | Sophos | 3.81 (including) | 3.81 (including) |
| Sophos_anti-virus | Sophos | 3.82 (including) | 3.82 (including) |
| Sophos_anti-virus | Sophos | 3.83 (including) | 3.83 (including) |
| Sophos_anti-virus | Sophos | 3.84 (including) | 3.84 (including) |
| Sophos_anti-virus | Sophos | 3.85 (including) | 3.85 (including) |
| Sophos_anti-virus | Sophos | 3.86 (including) | 3.86 (including) |
| Sophos_anti-virus | Sophos | 3.90 (including) | 3.90 (including) |
| Sophos_anti-virus | Sophos | 3.91 (including) | 3.91 (including) |
| Sophos_anti-virus | Sophos | 5.0.1 (including) | 5.0.1 (including) |
| Sophos_mailmonitor | Sophos | 2.0 (including) | 2.0 (including) |
| Sophos_mailmonitor | Sophos | 2.1 (including) | 2.1 (including) |
| Sophos_mailmonitor_for_notes_domino | Sophos | * | * |
| Sophos_puremessage_anti-virus | Sophos | 4.6 (including) | 4.6 (including) |
| Sophos_small_business_suite | Sophos | 1.0 (including) | 1.0 (including) |