medium5.0
CVE-2007-4787
The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, wh…
Impact
The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Scanning Engine | Version 2.30.4 |
| Sophos | Sophos Anti-Virus | Versions 3.4.6, 3.78, 3.78d, 3.79, 3.80, 3.81 |