vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2008-6903

N/A
Published: August 6, 2009 at 12:00 AM UTC
Updated: June 16, 2026 at 11:03 PM UTC
2 products affected across 1 vendorAnti VirusAnti Virus7.6.3

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 7%

Description

Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Linux before 6.4.5, Anti-Virus for UNIX before 7.0.5, Anti-Virus for Unix and Netware before 4.37.0, Sophos EM Library, and Sophos small business solutions, when CAB archive scanning is enabled, allows remote attackers to cause a denial of service (segmentation fault) via a "fuzzed" CAB archive file, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

References (9)

Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=122893252316489&w=2
VDB Entryx_refsource_OSVDB
Source: [email protected]
http://osvdb.org/50863
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/33177
x_refsource_MISC
Source: [email protected]
http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html
x_refsource_MISCPatch
Source: [email protected]
http://www.ivizsecurity.com/security-advisory-iviz-sr-08015.html
VDB Entryx_refsource_BID
Source: [email protected]
http://www.securityfocus.com/bid/32748
VDB Entryx_refsource_SECTRACKPatch
Source: [email protected]
http://www.securitytracker.com/id?1021476
x_refsource_CONFIRMx_refsource_MISCPatchVendor Advisory
Source: [email protected]
http://www.sophos.com/support/knowledgebase/article/50611.html

CVSS

4.3MEDIUM[email protected]
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-399

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card