CVE-2008-6904 Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to cause a denial of service (segmentation fault) and possibly...
HighCVSS 10.0
EPSS 10.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via crafted files that have been packed with (1) armadillo, (2) asprotect, or (3) asprotectSKE.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos anti-virus | = 4.7.18 | No fix listed |
| sophos anti-virus | = 4.9.18 | No fix listed |
| sophos anti-virus | = 4.37.0 | No fix listed |
| sophos anti-virus | = 6.4.5 | No fix listed |
| sophos anti-virus | = 7.0.5 | No fix listed |
| sophos anti-virus7.6.3 | All versions | No fix listed |
References
- 20081210 [IVIZ-08-015] Sophos Antivirus for Linux vulnerability mailing-list
- www.ivizsecurity.com
- 32748 vdb-entry
- www.sophos.com vendor-advisory
- savscan-armadillo-code-execution(52443) vdb-entry