CVE-2007-4787

No fix known EPSS 6%

The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.

Published 2007-09-10 · CVE record · OSV

Products: sophos scanning_engine, sophos_anti-virus