Unscored severity · published Sep 10, 2007
CVE-2007-4787
The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow…
–
CVSS
5.7%
EPSS
No
On KEV
Description
The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.7% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Scanning Engine · Sophos
2.30.4 · source: NVD
SA
Sophos Anti-virus · Sophos
3.4.6; 3.78; 3.78d; 3.79; 3.80; 3.81; +28 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4787
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4787
osvdb.org
http://osvdb.org/37988
secunia.com
http://secunia.com/advisories/26726
www.securityfocus.com
http://www.securityfocus.com/bid/25574
Patch
http://www.sophos.com/support/knowledgebase/article/29146.html
www.vupen.com
http://www.vupen.com/english/advisories/2007/3078
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/36502
More from Scanning Engine
–
CVE-2014-1213
Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and…
–
CVE-2007-4577
Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of…
–
CVE-2007-4578
Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX…