GCVE - cpe:2.3:a:sophos:anti-virus:4.5.12:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sophos:anti-virus:4.5.12:*:*:*:*:*:*:*

part: a version: 4.5.12 update: *

Vendor	Sophos (`a481dca1-298d-56ee-9d5c-373f6e8cead2`)
Product	Anti Virus (`fe833381-1f07-55be-b3b0-4dc5bcaf36ad`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-2308`	vulnerable	2026-06-03 14:30:24.682097	Details available Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function. Published: 2010-06-16T20:00:00.000Z Updated: 2024-08-07T02:32:15.516Z Open on db.gcve.eu Reference links http://secunia.com/advisories/40085 http://dvlabs.tippingpoint.com/advisory/TPTI-10-03 http://www.sophos.com/support/knowledgebase/article/111126.html http://www.securityfocus.com/archive/1/511773/100/0/threaded http://www.securitytracker.com/id?1024089	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4578`	vulnerable	2026-06-03 14:28:18.925651	Details available Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable. Published: 2007-08-28T18:00:00.000Z Updated: 2024-08-07T15:01:09.611Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/2972 http://www.nruns.com/security_advisory_sophos_upx_infinite_loop_dos.php http://www.securityfocus.com/bid/25428 http://secunia.com/advisories/26580 http://www.securityfocus.com/archive/1/477864/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4577`	vulnerable	2026-06-03 14:28:18.915290	Details available Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a "BZip bomb"). Published: 2007-08-28T18:00:00.000Z Updated: 2024-08-07T15:01:09.876Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/2972 http://www.securityfocus.com/bid/25428 http://secunia.com/advisories/26580 http://securityreason.com/securityalert/3073 http://www.sophos.com/support/knowledgebase/article/28407.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5647`	vulnerable	2026-06-03 14:27:46.388881	Details available Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a malformed CHM file with a large name length in the CHM chunk header, aka "CHM name length memory consumption vulnerability." Published: 2006-11-01T15:00:00.000Z Updated: 2024-08-07T19:55:53.925Z Open on db.gcve.eu Reference links http://www.sophos.com/support/knowledgebase/article/7609.html http://securitytracker.com/id?1017132 http://www.vupen.com/english/advisories/2006/4239 http://www.securityfocus.com/bid/20816 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=451	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5646`	vulnerable	2026-06-03 14:27:46.388227	Details available Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service (memory corruption) via a CHM file with an LZX decompression header that specifies a Window_size of 0. Published: 2006-11-01T15:00:00.000Z Updated: 2024-08-07T19:55:54.135Z Open on db.gcve.eu Reference links http://www.sophos.com/support/knowledgebase/article/7609.html http://securitytracker.com/id?1017132 http://www.vupen.com/english/advisories/2006/4239 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=452 http://www.securityfocus.com/bid/20816	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5645`	vulnerable	2026-06-03 14:27:46.381309	Details available Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero. Published: 2006-11-01T15:00:00.000Z Updated: 2024-08-07T19:55:54.155Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1018450 http://www.sophos.com/support/knowledgebase/article/7609.html http://securitytracker.com/id?1017132 http://www.vupen.com/english/advisories/2006/4239 http://www.securityfocus.com/bid/20816	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.