Computer Security
[EN] no-pyccku

Sophos Antivirus cross aplication scripting
SecurityVulns ID:8124
Threat Level:
Description:Cross application scripting on ZIP archive content logging.
Affected:SOPHOS : Sophos Anti-Virus 6.5
CVE:CVE-2007-4512 (Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe.)
Original documentdocumentdisclosure_(at), Sophos Anti-Virus 6.5.4 Vulnerability (06.09.2007)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod