| Package | Affected versions | Patched versions |
|---|---|---|
| sophos anti-virus | = 3.4.6= 3.78= 3.78d= 3.79= 3.80= 3.81= 3.82= 3.83= 3.84= 3.85= 3.86= 3.90= 3.91= 5.0.1 | |
| sophos mailmonitor | = 2.0= 2.1 | |
| sophos puremessage anti-virus | = 4.6 | |
| sophos small business suite | = 1.0 |
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free