CVE-2007-4577

No fix known EPSS 6%

Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a "BZip bomb").

Published 2007-08-28 · CVE record · OSV

Products: sophos anti-virus, sophos scanning_engine, sophos small_business_suite