Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sophos_anti-virus | Sophos | * | 4.02 (excluding) |
| Sophos_anti-virus | Sophos | 4.5.0 (including) | 4.5.9 (excluding) |
| Sophos_anti-virus | Sophos | 4.6.0 (including) | 4.6.9 (excluding) |
| Sophos_anti-virus | Sophos | 5.0.0 (including) | 5.1.4 (excluding) |
| Sophos_anti-virus | Sophos | 4.04 (including) | 4.04 (including) |
References
- http://www.sophos.com/support/knowledgebase/article/3803.html
- http://www.vupen.com/english/advisories/2006/0347
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24345
- http://www.sophos.com/support/knowledgebase/article/3803.html
- http://www.vupen.com/english/advisories/2006/0347
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24345