Approved changes feed: RSS · Atom

cpe:2.3:a:sophos:sophos_anti-virus:3.4.6:*:*:*:*:*:*:*

part: a version: 3.4.6 update: *

VendorSophos (a481dca1-298d-56ee-9d5c-373f6e8cead2)
ProductSophos Anti Virus (2f581eaa-3ae1-507f-a081-847efb82212b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4787 vulnerable 2026-06-03 14:28:19.410357 Details available
The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.
Published: 2007-09-10T21:00:00.000Z
Updated: 2024-08-07T15:08:34.165Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2768 vulnerable 2026-06-03 14:27:03.200962 Details available
Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote attackers to execute arbitrary code via a Visio file with a crafted sub record length.
Published: 2005-09-02T04:00:00.000Z
Updated: 2024-08-07T22:45:02.244Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1530 vulnerable 2026-06-03 14:26:59.565931 Details available
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.
Published: 2005-07-19T04:00:00.000Z
Updated: 2024-08-07T21:51:50.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2088 vulnerable 2026-06-03 14:26:46.335236 Details available
Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification (DSN) where the original email is not included in the bounce message.
Published: 2005-05-19T04:00:00.000Z
Updated: 2024-08-08T01:15:01.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1096 vulnerable 2026-06-03 14:26:38.436241 Details available
Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0937 vulnerable 2026-06-03 14:26:37.588829 Details available
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Published: 2004-11-19T05:00:00.000Z
Updated: 2024-08-08T00:31:48.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0936 vulnerable 2026-06-03 14:26:37.587554 Details available
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Published: 2004-11-19T05:00:00.000Z
Updated: 2024-08-08T00:31:48.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0935 vulnerable 2026-06-03 14:26:37.586360 Details available
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Published: 2004-11-19T05:00:00.000Z
Updated: 2024-08-08T00:31:48.168Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0934 vulnerable 2026-06-03 14:26:37.585079 Details available
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Published: 2004-11-19T05:00:00.000Z
Updated: 2024-08-08T00:31:48.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0933 vulnerable 2026-06-03 14:26:37.583803 Details available
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Published: 2004-11-19T05:00:00.000Z
Updated: 2024-08-08T00:31:47.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0932 vulnerable 2026-06-03 14:26:37.575681 Details available
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Published: 2004-11-19T05:00:00.000Z
Updated: 2024-08-08T00:31:48.096Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.