CVE-2007-4578

Published: Aug 28, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable.

Affected (37)

Products: Sophos: Anti Virus, Scanning Engine, Small Business Suite

3 products

Configuration A

37 vulnerable

Vulnerable Software	Affected Versions
Sophos Anti Virus	Version 3.4.6
Sophos Anti Virus	Version 3.78
Sophos Anti Virus	Version 3.78d
Sophos Anti Virus	Version 3.79
Sophos Anti Virus	Version 3.80
Sophos Anti Virus	Version 3.81
Sophos Anti Virus	Version 3.82
Sophos Anti Virus	Version 3.83
Sophos Anti Virus	Version 3.84
Sophos Anti Virus	Version 3.85
Sophos Anti Virus	Version 3.86
Sophos Anti Virus	Version 3.90
Sophos Anti Virus	Version 3.91
Sophos Anti Virus	Version 3.95
Sophos Anti Virus	Version 3.96.0
Sophos Anti Virus	Version 4.03
Sophos Anti Virus	Version 4.04
Sophos Anti Virus	Version 4.05
Sophos Anti Virus	Version 4.5.11
Sophos Anti Virus	Version 4.5.12
Sophos Anti Virus	Version 4.5.3
Sophos Anti Virus	Version 4.5.4
Sophos Anti Virus	Version 4.7.1
Sophos Anti Virus	Version 4.7.2
Sophos Anti Virus	Version 5.0.1
Sophos Anti Virus	Version 5.0.2
Sophos Anti Virus	Version 5.0.4
Sophos Anti Virus	Version 5.0.9
Sophos Anti Virus	Version 5.0.9
Sophos Anti Virus	Version 5.1
Sophos Anti Virus	Version 5.2.1
Sophos Anti Virus	Version 5.2
Sophos Anti Virus	Version 6.5
Sophos Scanning Engine	Version 2.30.4
Sophos Scanning Engine	Version 2.40.2
Sophos Small Business Suite	Version 4.04
Sophos Small Business Suite	Version 4.05