Approved changes feed: RSS · Atom

cpe:2.3:a:sophos:puremessage_for_microsoft_exchange:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

VendorSophos (a481dca1-298d-56ee-9d5c-373f6e8cead2)
ProductPuremessage For Microsoft Exchange (6d597ce4-af93-5a4a-83c0-9ae54f1dcd61)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-7106 vulnerable 2026-06-03 14:29:20.369576 Details available
The installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti-virus and anti-spam are supported, does not create or launch the associated scan engines when the system is under heavy load, which has unspecified impact, probably remote bypass of scanner protection or a denial of service (message loss or delay).
Published: 2009-08-27T20:00:00.000Z
Updated: 2024-08-07T11:56:14.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7105 vulnerable 2026-06-03 14:29:20.369256 Details available
Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (EdgeTransport.exe termination) via a TNEF-encoded message with a crafted rich text body that is not properly handled during conversion to plain text. NOTE: this might be related to CVE-2008-7104.
Published: 2009-08-27T20:00:00.000Z
Updated: 2024-08-07T11:56:14.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7104 vulnerable 2026-06-03 14:29:20.368828 Details available
Sophos PureMessage Scanner service (PMScanner.exe) in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (message queue delay and incomplete spam rule update) via a crafted (1) RTF or (2) PDF file.
Published: 2009-08-27T20:00:00.000Z
Updated: 2024-08-07T11:56:14.048Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.