CVE-2008-7105: Medium severity sophos puremessage anti-virus vulnerability

Published Aug 27, 2009

Updated

Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (EdgeTransport.exe termination) via a TNEF-encoded message with a crafted rich text body that is not properly handled during conversion to plain text. NOTE: this might be related to CVE-2008-7104.

Affected Software

1 affected component

Sophos PureMessage for Microsoft Exchange=3.0

Remediation

Patch Available

http://www.sophos.com/support/knowledgebase/article/44385.html

Event History

Aug 27, 2009

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-7105?

CVE-2008-7105 is classified as a denial of service vulnerability.

How do I fix CVE-2008-7105?

To fix CVE-2008-7105, you should upgrade Sophos PureMessage for Microsoft Exchange to version 3.0.2 or later.

What systems are affected by CVE-2008-7105?

CVE-2008-7105 affects Sophos PureMessage for Microsoft Exchange version 3.0.

What type of attack does CVE-2008-7105 enable?

CVE-2008-7105 enables remote attackers to cause a denial of service condition.

What can trigger the vulnerability in CVE-2008-7105?

The vulnerability in CVE-2008-7105 can be triggered by a TNEF-encoded message with a maliciously crafted rich text body.