CVE-2007-4787 The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypas...
MediumCVSS 5.0
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos scanning engine | = 2.30.4 | No fix listed |
| sophos anti-virus | = 3.4.6 | No fix listed |
| sophos anti-virus | = 3.78 | No fix listed |
| sophos anti-virus | = 3.78d | No fix listed |
| sophos anti-virus | = 3.79 | No fix listed |
| sophos anti-virus | = 3.80 | No fix listed |
| sophos anti-virus | = 3.81 | No fix listed |
| sophos anti-virus | = 3.82 | No fix listed |
| sophos anti-virus | = 3.83 | No fix listed |
| sophos anti-virus | = 3.84 | No fix listed |
| sophos anti-virus | = 3.85 | No fix listed |
| sophos anti-virus | = 3.86 | No fix listed |
| sophos anti-virus | = 3.90 | No fix listed |
| sophos anti-virus | = 3.91 | No fix listed |
| sophos anti-virus | = 3.95 | No fix listed |
| sophos anti-virus | = 3.96 | No fix listed |
| sophos anti-virus | = 4.04 | No fix listed |
| sophos anti-virus | = 4.05 | No fix listed |
| sophos anti-virus | = 4.5.3 | No fix listed |
| sophos anti-virus | = 4.5.4 | No fix listed |
| sophos anti-virus | = 4.5.11 | No fix listed |
| sophos anti-virus | = 4.5.12 | No fix listed |
| sophos anti-virus | = 4.7.1 | No fix listed |
| sophos anti-virus | = 4.7.2 | No fix listed |
| sophos anti-virus | = 5.0.1 | No fix listed |
Show 10 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos anti-virus | = 5.0.2 | No fix listed |
| sophos anti-virus | = 5.0.4 | No fix listed |
| sophos anti-virus | = 5.1 | No fix listed |
| sophos anti-virus | = 5.2.0 | No fix listed |
| sophos anti-virus | = 5.2.1 | No fix listed |
| sophos anti-virus | = 6.0 | No fix listed |
| sophos anti-virus | = 6.5 | No fix listed |
| sophos anti-virus | = 6.5.4_r2 | No fix listed |
| sophos anti-virus | = 6.5.8 | No fix listed |
| sophos anti-virus | = 7.0 | No fix listed |
References
- 37988 vdb-entry
- 26726 third-party-advisory
- 25574 vdb-entry
- www.sophos.com patch
- ADV-2007-3078 vdb-entry
- sophos-archive-security-bypass(36502) vdb-entry