Computer Security
[EN] securityvulns.ru no-pyccku


Sophos Antivirus cross aplication scripting
Published:06.09.2007
Source:
SecurityVulns ID:8124
Type:remote
Threat Level:
5/10
Description:Cross application scripting on ZIP archive content logging.
Affected:SOPHOS : Sophos Anti-Virus 6.5
CVE:CVE-2007-4512 (Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe.)
Original documentdocumentdisclosure_(at)_contextis.co.uk, Sophos Anti-Virus 6.5.4 Vulnerability (06.09.2007)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod