Sophos Anti-Virus multiple security vulnerabilities updated since 30.10.2006
Published:		13.12.2006
Source:		SECUNIA
SecurityVulns ID:		6753
Type:		remote
Level:		5/10
Description:		Crash on parsing malformed RAR, CHM and petite-packed files. Buffer overflow on CPIO and SIT archives parsing.

Affected:		SOPHOS : Sophos Anti-Virus for Windows 6.0
		SOPHOS : Sophos Endpoint Security 6.0
		SOPHOS : Sophos Anti-Virus for Linux 5.0
		SOPHOS : Sophos Anti-Virus 4.10

Original document		ZDI, ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability (13.12.2006)
		ZDI, ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability (13.12.2006)
		IDEFENSE, [Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability (09.12.2006)
		IDEFENSE, [Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability (09.12.2006)
		IDEFENSE, iDefense Security Advisory 10.31.06: Sophos Anti-Virus Petite File Denial of Service Vulnerability (01.11.2006)
		SECUNIA, [SA22635] Sophos Anti-Virus Petite Plugin Denial of Service Vulnerability (30.10.2006)
		SECUNIA, [SA22591] Sophos Anti-Virus RAR and CHM Denial of Service Vulnerabilities (30.10.2006)

Files:		Exploits Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability
		Sophos Antivirus CHM File Name Length Heap Overflow Vulnerability
Discuss:		Read or add your comments to this news (0 comments)