CVE-2007-4578: Medium severity SOPHOS Anti-Virus vulnerability
Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4578?
CVE-2007-4578 is classified as a denial of service vulnerability, which can cause the affected systems to crash.
How do I fix CVE-2007-4578?
To resolve CVE-2007-4578, upgrade to the latest version of Sophos Anti-Virus that addresses this vulnerability.
What versions of Sophos Anti-Virus are affected by CVE-2007-4578?
CVE-2007-4578 affects multiple versions of Sophos Anti-Virus, including versions prior to 2.48.0.
What impact does CVE-2007-4578 have on Sophos Anti-Virus?
The impact of CVE-2007-4578 can lead to crashes of the Sophos Anti-Virus software and potentially allow arbitrary code execution.
Is there a workaround for CVE-2007-4578?
There are no known workarounds for CVE-2007-4578; upgrading to a patched version is the recommended course of action.