| Package | Affected versions | Patched versions |
|---|---|---|
| anti-virus | ≤ 6.5.4_r2≤ 7.0 |
Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free