CVE-2014-2385
Published Jul 22, 2014Multiple cross-site scripting (XSS) vulnerabilities in the web UI in Sophos Anti-Virus for Linux before 9.6.1 allow local users to inject arbitrary web script or HTML via the (1)…
Vendor/product archive
sophos / anti-virus CVEs
Beta · best-effort12 CVEs tagged to sophos / anti-virus — 2 Critical, 2 High, 8 Medium, 0 Low, 0 Unrated.
CVE-2010-2308
Published Jun 16, 2010Unspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQuer…
CVE-2008-6904
Published Aug 6, 2009Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to cause a denial of service (segmentatio…
CVE-2008-6903
Published Aug 6, 2009Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Linux before 6.4.5, Anti-Virus for UNIX b…
CVE-2008-5541
Published Dec 12, 2008Sophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info"…
CVE-2008-1737
Published Apr 30, 2008Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service (reboot with the product disabled) a…
CVE-2007-4512
Published Sep 10, 2007Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2007-4577
Published Aug 28, 2007Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multi…
CVE-2007-4578
Published Aug 28, 2007Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX p…
CVE-2006-5645
Published Nov 1, 2006Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remot…
CVE-2006-5646
Published Nov 1, 2006Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is e…
CVE-2006-5647
Published Nov 1, 2006Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service (mem…
Showing 1-12 of 12 CVEsPage 1 of 1