GCVE - cpe:2.3:a:sophos:anti-virus:3.81:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sophos:anti-virus:3.81:*:*:*:*:*:*:*

part: a version: 3.81 update: *

Vendor	Sophos (`a481dca1-298d-56ee-9d5c-373f6e8cead2`)
Product	Anti Virus (`fe833381-1f07-55be-b3b0-4dc5bcaf36ad`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-2308`	vulnerable	2026-06-03 14:30:24.673208	Details available Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function. Published: 2010-06-16T20:00:00.000Z Updated: 2024-08-07T02:32:15.516Z Open on db.gcve.eu Reference links http://secunia.com/advisories/40085 http://dvlabs.tippingpoint.com/advisory/TPTI-10-03 http://www.sophos.com/support/knowledgebase/article/111126.html http://www.securityfocus.com/archive/1/511773/100/0/threaded http://www.securitytracker.com/id?1024089	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4578`	vulnerable	2026-06-03 14:28:18.925385	Details available Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable. Published: 2007-08-28T18:00:00.000Z Updated: 2024-08-07T15:01:09.611Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/2972 http://www.nruns.com/security_advisory_sophos_upx_infinite_loop_dos.php http://www.securityfocus.com/bid/25428 http://secunia.com/advisories/26580 http://www.securityfocus.com/archive/1/477864/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4577`	vulnerable	2026-06-03 14:28:18.906672	Details available Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a "BZip bomb"). Published: 2007-08-28T18:00:00.000Z Updated: 2024-08-07T15:01:09.876Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/2972 http://www.securityfocus.com/bid/25428 http://secunia.com/advisories/26580 http://securityreason.com/securityalert/3073 http://www.sophos.com/support/knowledgebase/article/28407.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.