← Vulnerability feed

Vulnerability record · CVE-2007-4578 · published 28 August 2007

CVE-2007-4578: Sophos anti-virus vulnerability

Sophos · Anti Virus

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable.

6.8 CVSS 2.0 Medium EPSS 7.3% · top 5.8% CWE-189 · CWE-189
6.8CVSS 2.0 base score
7.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
20References
16 Jun 2026Last modified by NVD

Description

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/26580 PatchVendor Advisory
http://securityreason.com/securityalert/3072
http://securitytracker.com/id?1018608
http://www.nruns.com/security_advisory_sophos_upx_infinite_loop_dos.php
http://www.securityfocus.com/archive/1/477720/100/0/threaded
http://www.securityfocus.com/archive/1/477864/100/0/threaded
http://www.securityfocus.com/archive/1/477882/100/0/threaded
http://www.securityfocus.com/bid/25428 Patch
http://www.sophos.com/support/knowledgebase/article/28407.html Patch
http://www.vupen.com/english/advisories/2007/2972
http://secunia.com/advisories/26580 PatchVendor Advisory
http://securityreason.com/securityalert/3072
http://securitytracker.com/id?1018608
http://www.nruns.com/security_advisory_sophos_upx_infinite_loop_dos.php
http://www.securityfocus.com/archive/1/477720/100/0/threaded
http://www.securityfocus.com/archive/1/477864/100/0/threaded
http://www.securityfocus.com/archive/1/477882/100/0/threaded
http://www.securityfocus.com/bid/25428 Patch
http://www.sophos.com/support/knowledgebase/article/28407.html Patch
http://www.vupen.com/english/advisories/2007/2972

Track CVE-2007-4578 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-6904Sophos anti-virus vulnerabilityMultiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to cause a …EPSS 11%9.3CVE-2008-5541Sophos anti-virus improper input validation vulnerabilitySophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placin…EPSS 7.6%7.8CVE-2007-4577Sophos anti-virus vulnerabilitySophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that re…EPSS 5.5%7.5CVE-2004-0552Sophos small business suite vulnerabilitySophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM…EPSS 24%7.2CVE-2010-2308Sophos anti-virus vulnerabilityUnspecified vulnerability in the filter driver (savonaccessfilter.sys) in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via c…EPSS 1.2%6.9CVE-2008-1737Sophos anti-virus improper input validation vulnerabilitySophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service (reboo…EPSS 0.62%6.4CVE-2006-5647Sophos anti-virus memory buffer overflow vulnerabilitySophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to …EPSS 21%5.6CVE-2014-1213Sophos scanning engine permissions and access controls vulnerabilitySophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set …EPSS 0.97%

Source: NIST National Vulnerability Database (record CVE-2007-4578), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.