Vulnerability in Sophos Sophos_anti-virus
CVE-2005-1530
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.
EPSS: 0.062 (92.7th percentile) — read the EPSS interpretation.
Affected products
- Sophos Sophos_anti-virus — versions 3.4.6, 3.78, 3.78d
- Sophos Sophos_mailmonitor — versions 2.0, 2.1
- Sophos Sophos_mailmonitor_for_notes_domino
- Sophos Sophos_puremessage_anti-virus — versions 4.6
- Sophos Sophos_small_business_suite — versions 1.0
- N/a — versions n/a
References
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_IDEFENSE, Patch, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_XF)