Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable.
2007-08-28T18:17:00.000
2025-04-09T00:30:58.490
Deferred
CVSSv2: 6.8 (MEDIUM)
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | sophos | anti-virus | 3.4.6 | Yes |
| Application | sophos | anti-virus | 3.78 | Yes |
| Application | sophos | anti-virus | 3.78d | Yes |
| Application | sophos | anti-virus | 3.79 | Yes |
| Application | sophos | anti-virus | 3.80 | Yes |
| Application | sophos | anti-virus | 3.81 | Yes |
| Application | sophos | anti-virus | 3.82 | Yes |
| Application | sophos | anti-virus | 3.83 | Yes |
| Application | sophos | anti-virus | 3.84 | Yes |
| Application | sophos | anti-virus | 3.85 | Yes |
| Application | sophos | anti-virus | 3.86 | Yes |
| Application | sophos | anti-virus | 3.90 | Yes |
| Application | sophos | anti-virus | 3.91 | Yes |
| Application | sophos | anti-virus | 3.95 | Yes |
| Application | sophos | anti-virus | 3.96.0 | Yes |
| Application | sophos | anti-virus | 4.03 | Yes |
| Application | sophos | anti-virus | 4.04 | Yes |
| Application | sophos | anti-virus | 4.05 | Yes |
| Application | sophos | anti-virus | 4.5.3 | Yes |
| Application | sophos | anti-virus | 4.5.4 | Yes |
| Application | sophos | anti-virus | 4.5.11 | Yes |
| Application | sophos | anti-virus | 4.5.12 | Yes |
| Application | sophos | anti-virus | 4.7.1 | Yes |
| Application | sophos | anti-virus | 4.7.2 | Yes |
| Application | sophos | anti-virus | 5.0.1 | Yes |
| Application | sophos | anti-virus | 5.0.2 | Yes |
| Application | sophos | anti-virus | 5.0.4 | Yes |
| Application | sophos | anti-virus | 5.0.9 | Yes |
| Application | sophos | anti-virus | 5.0.9 | Yes |
| Application | sophos | anti-virus | 5.1 | Yes |
| Application | sophos | anti-virus | 5.2 | Yes |
| Application | sophos | anti-virus | 5.2.1 | Yes |
| Application | sophos | anti-virus | 6.5 | Yes |
| Application | sophos | scanning_engine | 2.30.4 | Yes |
| Application | sophos | scanning_engine | 2.40.2 | Yes |
| Application | sophos | small_business_suite | 4.04 | Yes |
| Application | sophos | small_business_suite | 4.05 | Yes |