NVD

Id
56900  
Name
CVE-2007-4787  
Description
The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-09-10  
Modified Date
2011-03-07  
Seq
2007-4787  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
290431 56900 CVE-2007-4787 25574  View
290432 56900 CVE-2007-4787 http://www.sophos.com/support/knowledgebase/article/29146.html  View
290433 56900 CVE-2007-4787 ADV-2007-3078  View
290434 56900 CVE-2007-4787 sophos-archive-security-bypass(36502)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57382 JVNDB-2007-006074 Sophos Anti-Virus のウィルス検出エンジンにおけるマルウェアの検出を回避される脆弱性 Sophos Anti-Virus のウィルス検出エンジンは、変更されたヘッダを伴う不正な形式の (1) CAB、(2) LZH、および (3) RAR ファイルを適切に処理しないため、マルウェアの検出を回避される脆弱性が存在します。 CVE-2007-4787 28142 CVE-2007-4787 56900 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006074.html 2007-09-10 2012-12-20 View