Vulnerability in Sophos Anti-Virus

CVE-2005-4680

Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned.

EPSS: 0.085 (94.5th percentile) — read the EPSS interpretation.

Affected products

Sophos Sophos_anti-virus — versions 4.04
N/a — versions n/a

References

cve@mitre.org (Permissions Required, Third Party Advisory, vdb-entry, x_refsource_VUPEN)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)