CVE-2008-6903: Medium severity sophos anti-virus for sophos central macos vulnerability
Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Linux before 6.4.5, Anti-Virus for UNIX before 7.0.5, Anti-Virus for Unix and Netware before 4.37.0, Sophos EM Library, and Sophos small business solutions, when CAB archive scanning is enabled, allows remote attackers to cause a denial of service (segmentation fault) via a "fuzzed" CAB archive file, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6903?
CVE-2008-6903 is considered a high severity vulnerability due to its potential impact on multiple versions of Sophos Anti-Virus software.
Which versions of Sophos Anti-Virus are affected by CVE-2008-6903?
CVE-2008-6903 affects Sophos Anti-Virus versions prior to 7.6.3 for Windows, 4.7.18 for Windows NT/9x, 4.9.18 for OS X, 6.4.5 for Linux, 7.0.5 for UNIX, and 4.37.0 for Netware.
How can I fix CVE-2008-6903?
To fix CVE-2008-6903, upgrade your Sophos Anti-Virus software to the latest patched version.
What remediation steps should I take for CVE-2008-6903?
Remediation for CVE-2008-6903 includes updating vulnerable Sophos Anti-Virus installations and implementing additional security measures such as firewalls and intrusion detection systems.
What are the potential risks associated with CVE-2008-6903?
The risks associated with CVE-2008-6903 include unauthorized access, data breaches, and exploitation of the affected systems.