Sophos Antivirus cross aplication scripting
Published:		06.09.2007
Source:		BUGTRAQ
SecurityVulns ID:		8124
Type:		remote
Level:		5/10
Description:		Cross application scripting on ZIP archive content logging.

Affected:		SOPHOS : Sophos Anti-Virus 6.5
CVE:		CVE-2007-4512 (Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe.)

Original document

disclosure_(at)_contextis.co.uk, Sophos Anti-Virus 6.5.4 Vulnerability (06.09.2007)

Discuss:

Read or add your comments to this news (0 comments)