| Package | Affected versions | Patched versions |
|---|---|---|
| anti-virus | = 3.4.6= 3.78= 3.78d= 3.79= 3.80= 3.81= 3.82= 3.83= 3.84= 3.85= 3.86= 3.90= 3.91= 3.95= 3.96.0= 4.03= 4.04= 4.05= 4.5.11= 4.5.12= 4.5.3= 4.5.4= 4.7.1= 4.7.2= 5.0.1= 5.0.2= 5.0.4= 5.0.9= 5.1= 5.2= 5.2.1= 6.5 | |
| scanning engine | = 2.30.4= 2.40.2 | |
| small business suite | = 4.04= 4.05 |
Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free