CVE-2007-4577 Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary....
HighCVSS 7.8
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a "BZip bomb").
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos anti-virus | = 3.4.6 | No fix listed |
| sophos anti-virus | = 3.78 | No fix listed |
| sophos anti-virus | = 3.78d | No fix listed |
| sophos anti-virus | = 3.79 | No fix listed |
| sophos anti-virus | = 3.80 | No fix listed |
| sophos anti-virus | = 3.81 | No fix listed |
| sophos anti-virus | = 3.82 | No fix listed |
| sophos anti-virus | = 3.83 | No fix listed |
| sophos anti-virus | = 3.84 | No fix listed |
| sophos anti-virus | = 3.85 | No fix listed |
| sophos anti-virus | = 3.86 | No fix listed |
| sophos anti-virus | = 3.90 | No fix listed |
| sophos anti-virus | = 3.91 | No fix listed |
| sophos anti-virus | = 3.95 | No fix listed |
| sophos anti-virus | = 3.96.0 | No fix listed |
| sophos anti-virus | = 4.03 | No fix listed |
| sophos anti-virus | = 4.04 | No fix listed |
| sophos anti-virus | = 4.05 | No fix listed |
| sophos anti-virus | = 4.5.3 | No fix listed |
| sophos anti-virus | = 4.5.4 | No fix listed |
| sophos anti-virus | = 4.5.11 | No fix listed |
| sophos anti-virus | = 4.5.12 | No fix listed |
| sophos anti-virus | = 4.7.1 | No fix listed |
| sophos anti-virus | = 4.7.2 | No fix listed |
| sophos anti-virus | = 5.0.1 | No fix listed |
Show 11 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos anti-virus | = 5.0.2 | No fix listed |
| sophos anti-virus | = 5.0.4 | No fix listed |
| sophos anti-virus | = 5.0.9 | No fix listed |
| sophos anti-virus | = 5.1 | No fix listed |
| sophos anti-virus | = 5.2 | No fix listed |
| sophos anti-virus | = 5.2.1 | No fix listed |
| sophos anti-virus | = 6.5 | No fix listed |
| sophos scanning engine | = 2.30.4 | No fix listed |
| sophos scanning engine | = 2.40.2 | No fix listed |
| sophos small business suite | = 4.04 | No fix listed |
| sophos small business suite | = 4.05 | No fix listed |
References
- 26580 patch third-party-advisory vendor-advisory
- 3073 third-party-advisory
- 1018608 vdb-entry
- www.nruns.com
- 20070824 n.runs-SA-2007.026 - Sophos Antivirus BZip parsing Infinite Loop Advisory mailing-list
- 25428 vdb-entry
- www.sophos.com
- ADV-2007-2972 vdb-entry