| Package | Affected versions | Patched versions |
|---|---|---|
| scanning engine | = 2.30.4 | |
| sophos anti-virus | = 3.4.6= 3.78= 3.78d= 3.79= 3.80= 3.81= 3.82= 3.83= 3.84= 3.85= 3.86= 3.90= 3.91= 3.95= 3.96= 4.04= 4.05= 4.5.11= 4.5.12= 4.5.3= 4.5.4= 4.7.1= 4.7.2= 5.0.1= 5.0.2= 5.0.4= 5.1= 5.2.0= 5.2.1= 6.0= 6.5= 6.5.4_r2= 6.5.8= 7.0 |
The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free