The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:36
Type | Values Removed | Values Added |
---|---|---|
References | () http://osvdb.org/37988 - | |
References | () http://secunia.com/advisories/26726 - | |
References | () http://www.securityfocus.com/bid/25574 - | |
References | () http://www.sophos.com/support/knowledgebase/article/29146.html - Patch | |
References | () http://www.vupen.com/english/advisories/2007/3078 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/36502 - |
Information
Published : 2007-09-10 21:17
Updated : 2024-11-21 00:36
NVD link : CVE-2007-4787
Mitre link : CVE-2007-4787
CVE.ORG link : CVE-2007-4787
JSON object : View
Products Affected
sophos
- sophos_anti-virus
- scanning_engine
CWE
CWE-20
Improper Input Validation