CVE-2007-4512: XSS
Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4512?
CVE-2007-4512 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2007-4512?
To remediate CVE-2007-4512, upgrade Sophos Anti-Virus to version 6.5.8 or 7.0.1 or later.
What types of software are affected by CVE-2007-4512?
CVE-2007-4512 affects Sophos Anti-Virus versions prior to 6.5.8 and 7.0.1.
What is a cross-site scripting vulnerability in the context of CVE-2007-4512?
In CVE-2007-4512, cross-site scripting allows attackers to inject malicious web scripts through improperly handled filenames.
Can CVE-2007-4512 be exploited remotely?
Yes, CVE-2007-4512 can be exploited remotely by attackers using crafted filenames in a virus signature.