CVE-2008-6903

CWE-3993 documents3 sources
Severity
4.3MEDIUM
EPSS
3.2%
top 12.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Sophos Anti-virus
Timeline
PublishedAug 6
Latest updateMay 17

Description

Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Linux before 6.4.5, Anti-Virus for UNIX before 7.0.5, Anti-Virus for Unix and Netware before 4.37.0, Sophos EM Library, and Sophos small business solutions, when CAB archive scanning is enabled, allows remote attackers to cause a denial of service (segmentation fault) via a "fuzzed" CAB archive file, as demonstrated by the OUSPG PROTOS GENOME test suite for Ar…

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDsophos/anti-virus5 versions+4

Patches

Patch: www.ivizsecurity.com ↗Patch: www.securitytracker.com ↗Patch: www.sophos.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5h67-gj5j-53f7: Sophos Anti-Virus for Windows before 7↗2022-05-17
▶
CVEList
CVE-2008-6903: Sophos Anti-Virus for Windows before 7↗2009-08-06
▶
CVE-2008-6903 (MEDIUM CVSS 4.3) | Sophos Anti-Virus for Windows befor | cvebase.io