CVE

Id
28144  
CVE No.
CVE-2007-4787  
Status
Candidate  
Description
The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.  
Phase
Assigned (20070910)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
291972 28144 CVE-2007-4787 CONFIRM:http://www.sophos.com/support/knowledgebase/article/29146.html  View
291973 28144 CVE-2007-4787 BID:25574  View
291974 28144 CVE-2007-4787 URL:http://www.securityfocus.com/bid/25574  View
291975 28144 CVE-2007-4787 VUPEN:ADV-2007-3078  View
291976 28144 CVE-2007-4787 URL:http://www.vupen.com/english/advisories/2007/3078  View
291977 28144 CVE-2007-4787 OSVDB:37988  View
291978 28144 CVE-2007-4787 URL:http://osvdb.org/37988  View
291979 28144 CVE-2007-4787 SECUNIA:26726  View
291980 28144 CVE-2007-4787 URL:http://secunia.com/advisories/26726  View
291981 28144 CVE-2007-4787 XF:sophos-archive-security-bypass(36502)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53919 JVNDB-2007-002611 Cisco CSM などにおけるサービス運用妨害 (DoS) の脆弱性 Cisco Content Switching Modules (CSM) および Cisco Content Switching Module with SSL (CSM-S) には、サービス停止が有効になっている際、サービス運用妨害 (リブート) 状態となる脆弱性が存在します。 CVE-2007-4789 28144 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002611.html  View