CVE-2007-4577

Published: Aug 28, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a "BZip bomb").

Affected (37)

Products: Sophos: Anti Virus, Scanning Engine, Small Business Suite

3 products

Configuration A

37 vulnerable

Vulnerable Software	Affected Versions
Sophos Anti Virus	Version 3.4.6
Sophos Anti Virus	Version 3.78
Sophos Anti Virus	Version 3.78d
Sophos Anti Virus	Version 3.79
Sophos Anti Virus	Version 3.80
Sophos Anti Virus	Version 3.81
Sophos Anti Virus	Version 3.82
Sophos Anti Virus	Version 3.83
Sophos Anti Virus	Version 3.84
Sophos Anti Virus	Version 3.85
Sophos Anti Virus	Version 3.86
Sophos Anti Virus	Version 3.90
Sophos Anti Virus	Version 3.91
Sophos Anti Virus	Version 3.95
Sophos Anti Virus	Version 3.96.0
Sophos Anti Virus	Version 4.03
Sophos Anti Virus	Version 4.04
Sophos Anti Virus	Version 4.05
Sophos Anti Virus	Version 4.5.11
Sophos Anti Virus	Version 4.5.12
Sophos Anti Virus	Version 4.5.3
Sophos Anti Virus	Version 4.5.4
Sophos Anti Virus	Version 4.7.1
Sophos Anti Virus	Version 4.7.2
Sophos Anti Virus	Version 5.0.1
Sophos Anti Virus	Version 5.0.2
Sophos Anti Virus	Version 5.0.4
Sophos Anti Virus	Version 5.0.9
Sophos Anti Virus	Version 5.0.9
Sophos Anti Virus	Version 5.1
Sophos Anti Virus	Version 5.2.1
Sophos Anti Virus	Version 5.2
Sophos Anti Virus	Version 6.5
Sophos Scanning Engine	Version 2.30.4
Sophos Scanning Engine	Version 2.40.2
Sophos Small Business Suite	Version 4.04
Sophos Small Business Suite	Version 4.05