CVE-2008-6904: Critical severity sophos anti-virus for sophos central macos vulnerability
Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via crafted files that have been packed with (1) armadillo, (2) asprotect, or (3) asprotectSKE.
Affected Software
Event History
Frequently Asked Questions
What are the implications of CVE-2008-6904?
CVE-2008-6904 can lead to denial of service conditions and the potential execution of arbitrary code via specially crafted files.
Which Sophos products are affected by CVE-2008-6904?
CVE-2008-6904 impacts multiple versions of Sophos Anti-Virus, including versions 4.7.18, 4.9.18, 4.37.0, 6.4.5, and 7.0.5.
How can I mitigate the risks associated with CVE-2008-6904?
To mitigate CVE-2008-6904, ensure you update to the latest version of Sophos Anti-Virus that addresses this vulnerability.
Is CVE-2008-6904 a remote code execution vulnerability?
CVE-2008-6904 may allow remote attackers to execute arbitrary code through crafted files.
What does CVE-2008-6904 mean for system administrators?
System administrators should review their Sophos Anti-Virus deployments for the vulnerability outlined in CVE-2008-6904 and apply necessary updates to prevent exploitation.