Sophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been written, which creates a race condition and may allow remote attackers to bypass virus protection if the file is executed before the antivirus starts on system reboot.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sophos_anti-virus | Sophos | 3.93 (including) | 3.93 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=111566827411376\u0026w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20519
- http://marc.info/?l=bugtraq\u0026m=111566827411376\u0026w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20519