Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sophos Anti-Virus BZip2 拒绝服务漏洞
Vulnerability Description
Sophos Anti-Virus是英国Sophos公司的一套适用于多种操作系统的反病毒软件。该软件可实时侦测和清除病毒、间谍软件、木马和蠕虫,确保台式机和笔记本电脑的全面网络保护。 Sophos Anti-Virus 5.0.1版本存在拒绝服务漏洞。 在引擎开启"扫描压缩文件"功能后,允许远程攻击者通过一个设置了超大"Extra field length"值的BZip2压缩文件,使杀毒引擎在扫描该文件时陷入死循环,导致CPU资源耗尽从而拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A