Vulnerabilities > Sophos > Sophos Puremessage Anti Virus > Medium

DATE CVE VULNERABILITY TITLE RISK
2008-07-15 CVE-2008-3177 Configuration vulnerability in Sophos products
Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments.
network
low complexity
sophos CWE-16
5.0
2005-07-19 CVE-2005-1530 Remote Denial Of Service vulnerability in Sophos Anti-Virus BZip2 Archive Handling
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.
network
low complexity
sophos
5.0