CVEvulnerability

CVE-2005-1530

5.0 MEDIUM Published 2005-07-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-07-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.

Affected configurations

• sophos sophos anti-virus 3.4.6 • sophos sophos anti-virus 3.78 • sophos sophos anti-virus 3.78d • sophos sophos anti-virus 3.79 • sophos sophos anti-virus 3.80 • sophos sophos anti-virus 3.81 • sophos sophos anti-virus 3.82 • sophos sophos anti-virus 3.83 • sophos sophos anti-virus 3.84 • sophos sophos anti-virus 3.85 • sophos sophos anti-virus 3.86 • sophos sophos anti-virus 3.90 • sophos sophos anti-virus 3.91 • sophos sophos anti-virus 5.0.1 • sophos sophos mailmonitor 2.0 • sophos sophos mailmonitor 2.1 • sophos sophos mailmonitor for notes domino • sophos sophos puremessage anti-virus 4.6 • sophos sophos small business suite 1.0

References