SA
Product
Sophos Anti-virus
by Sophos · last CVE Feb 10, 2014
35
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add Sophos Anti-virus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-1213
–
1%
Feb 10
Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and…
Affected: 10.0.11
CVE-2012-1461
–
92%
Mar 21
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus…
Affected: 4.61.0
CVE-2012-1459
–
100%
Mar 21
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus…
Affected: 4.61.0
CVE-2012-1458
–
74%
Mar 21
The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of…
Affected: 4.61.0
CVE-2012-1456
–
100%
Mar 21
The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus…
Affected: 4.61.0
CVE-2012-1453
–
98%
Mar 21
The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos Anti-Virus 4.61.0, Trend Micro AntiVirus 9.120.0.1004, McAfee…
Affected: 4.61.0
CVE-2012-1450
–
74%
Mar 21
The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Sophos Anti-Virus 4.61.0, and Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0 allows remote attackers to bypass…
Affected: 4.61.0
CVE-2012-1446
–
100%
Mar 21
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman…
Affected: 4.61.0
CVE-2012-1443
–
100%
Mar 21
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint…
Affected: 4.61.0
CVE-2012-1442
–
99%
Mar 21
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky…
Affected: 4.61.0
CVE-2012-1438
–
14%
Mar 21
The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via an Office file with a ustar…
Affected: 4.61.0
CVE-2012-1431
–
96%
Mar 21
The ELF file parser in Bitdefender 7.2, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee…
Affected: 4.61.0
CVE-2012-1430
–
96%
Mar 21
The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway…
Affected: 4.61.0
CVE-2012-1428
–
88%
Mar 21
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX…
Affected: 4.61.0
CVE-2012-1427
–
88%
Mar 21
The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX…
Affected: 4.61.0
CVE-2012-1424
–
87%
Mar 21
The TAR file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Jiangmin Antivirus 13.0.900, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5, and…
Affected: 4.61.0
CVE-2008-3177
–
5%
Jul 15
Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to…
Affected: All versions, or not specified
CVE-2007-4787
–
6%
Sep 10
The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow…
Affected: 3.4.6; 3.78; 3.78d; 3.79; 3.80; 3.81; +28 more
CVE-2006-6335
–
13%
Dec 12
Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via (1) a SIT archive with a long filename that is not…
Affected: through 2.3
CVE-2006-4839
–
3%
Nov 1
Sophos Anti-Virus 5.1 allows remote attackers to cause a denial of service (memory consumption) via a file that is compressed with Petite and contains a large number of sections
Affected: 5.1
CVE-2006-0994
–
22%
May 10
Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to…
Affected: after 4.00 before 4.05; 5.0.0 before 5.2.1
CVE-2005-4680
–
8%
Dec 31
Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which…
Affected: before 4.02; 4.5.0 before 4.5.9; 4.6.0 before 4.6.9; 5.0.0 before 5.1.4; 4.04
CVE-2005-3382
–
4%
Oct 30
Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte…
Affected: 3.91_engine_2.28.4
CVE-2005-3216
–
5%
Oct 14
Multiple interpretation error in unspecified versions of Sophos Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR…
Affected: All versions, or not specified
CVE-2005-2768
–
13%
Sep 2
Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote attackers to execute arbitrary…
Affected: 3.4.6; 3.78; 3.78d; 3.79; 3.80; 3.81; +11 more
CVE-2005-1530
–
6%
Jul 19
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with…
Affected: 3.4.6; 3.78; 3.78d; 3.79; 3.80; 3.81; +8 more
CVE-2005-1551
–
4%
May 14
Sophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been written, which creates a race condition and may allow remote attackers to bypass virus…
Affected: 3.93
CVE-2004-0937
–
15%
Feb 9
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with…
Affected: 3.4.6; 3.78; 3.78d; 3.79; 3.80; 3.81; +5 more
CVE-2004-0933
–
21%
Jan 27
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion…
Affected: 3.4.6; 3.78; 3.78d; 3.79; 3.80; 3.81; +5 more
CVE-2004-0936
–
15%
Jan 27
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed…
Affected: 3.4.6; 3.78; 3.78d; 3.79; 3.80; 3.81; +5 more
CVE-2004-0935
–
15%
Jan 27
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero,…
Affected: 3.4.6; 3.78; 3.78d; 3.79; 3.80; 3.81; +5 more
CVE-2004-0934
–
15%
Jan 27
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the…
Affected: 3.4.6; 3.78; 3.78d; 3.79; 3.80; 3.81; +5 more
CVE-2004-0932
–
64%
Jan 27
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via…
Affected: 3.4.6; 3.78; 3.78d; 3.79; 3.80; 3.81; +5 more
CVE-2004-1096
–
18%
Jan 10
Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both…
Affected: 3.4.6; 3.78; 3.78d; 3.79; 3.80; 3.81; +5 more
CVE-2004-2088
–
7%
Feb 12
Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification (DSN) where the original email is not included in…
Affected: 3.4.6; 3.78
Showing 35