[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faTu9Sw-RtPw6wjUYerYqUHd2gDijM_QU2uQbwtqeghQ":3,"g5a-ex:sophos\u002Fanti-virus@*":246,"g5a-family:sophos\u002Fanti-virus":248},{"success":4,"data":5},true,{"product":6,"versions":117,"topVulnerabilitiesByEpss":166,"kevVulnerabilities":223,"seoMetadata":224,"meta":243},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":116},"sophos","anti-virus",48,12,0,"2014-07-22",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,51,53,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,91,93,95,98,100,102,104,106,108,110,112,114],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"3.4.6",3,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"3.78",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"3.78d",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"3.79",{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"3.80",{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"3.81",{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},"3.82",{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},"3.83",{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},"3.84",{"version":35,"cve_count":16,"kev_count":11,"has_kev":17},"3.85",{"version":37,"cve_count":16,"kev_count":11,"has_kev":17},"3.86",{"version":39,"cve_count":16,"kev_count":11,"has_kev":17},"3.90",{"version":41,"cve_count":16,"kev_count":11,"has_kev":17},"3.91",{"version":43,"cve_count":16,"kev_count":11,"has_kev":17},"3.95",{"version":45,"cve_count":16,"kev_count":11,"has_kev":17},"3.96.0",{"version":47,"cve_count":16,"kev_count":11,"has_kev":17},"4.03",{"version":49,"cve_count":50,"kev_count":11,"has_kev":17},"4.04",6,{"version":52,"cve_count":50,"kev_count":11,"has_kev":17},"4.05",{"version":54,"cve_count":55,"kev_count":11,"has_kev":17},"4.33.0",2,{"version":57,"cve_count":55,"kev_count":11,"has_kev":17},"4.37.0",{"version":59,"cve_count":50,"kev_count":11,"has_kev":17},"4.5.11",{"version":61,"cve_count":50,"kev_count":11,"has_kev":17},"4.5.12",{"version":63,"cve_count":50,"kev_count":11,"has_kev":17},"4.5.3",{"version":65,"cve_count":50,"kev_count":11,"has_kev":17},"4.5.4",{"version":67,"cve_count":50,"kev_count":11,"has_kev":17},"4.7.1",{"version":69,"cve_count":55,"kev_count":11,"has_kev":17},"4.7.18",{"version":71,"cve_count":50,"kev_count":11,"has_kev":17},"4.7.2",{"version":73,"cve_count":55,"kev_count":11,"has_kev":17},"4.9.18",{"version":75,"cve_count":50,"kev_count":11,"has_kev":17},"5.0.1",{"version":77,"cve_count":50,"kev_count":11,"has_kev":17},"5.0.2",{"version":79,"cve_count":50,"kev_count":11,"has_kev":17},"5.0.4",{"version":81,"cve_count":16,"kev_count":11,"has_kev":17},"5.0.9",{"version":83,"cve_count":50,"kev_count":11,"has_kev":17},"5.1",{"version":85,"cve_count":50,"kev_count":11,"has_kev":17},"5.2",{"version":87,"cve_count":50,"kev_count":11,"has_kev":17},"5.2.1",{"version":89,"cve_count":90,"kev_count":11,"has_kev":17},"6.0.4",4,{"version":92,"cve_count":55,"kev_count":11,"has_kev":17},"6.4.5",{"version":94,"cve_count":16,"kev_count":11,"has_kev":17},"6.5",{"version":96,"cve_count":97,"kev_count":11,"has_kev":17},"7.0",1,{"version":99,"cve_count":90,"kev_count":11,"has_kev":17},"7.0.5",{"version":101,"cve_count":97,"kev_count":11,"has_kev":17},"7.6",{"version":103,"cve_count":97,"kev_count":11,"has_kev":17},"7.6.14",{"version":105,"cve_count":97,"kev_count":11,"has_kev":17},"7.6.15",{"version":107,"cve_count":97,"kev_count":11,"has_kev":17},"7.6.16",{"version":109,"cve_count":97,"kev_count":11,"has_kev":17},"7.6.17",{"version":111,"cve_count":97,"kev_count":11,"has_kev":17},"7.6.18",{"version":113,"cve_count":11,"kev_count":11,"has_kev":17},"9.5.1",{"version":115,"cve_count":11,"kev_count":11,"has_kev":17},"9.6.1","Anti-virus by Sophos is a technology product with 48 tracked versions and 12 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},{"version":35,"cve_count":16,"kev_count":11,"has_kev":17},{"version":37,"cve_count":16,"kev_count":11,"has_kev":17},{"version":39,"cve_count":16,"kev_count":11,"has_kev":17},{"version":41,"cve_count":16,"kev_count":11,"has_kev":17},{"version":43,"cve_count":16,"kev_count":11,"has_kev":17},{"version":45,"cve_count":16,"kev_count":11,"has_kev":17},{"version":47,"cve_count":16,"kev_count":11,"has_kev":17},{"version":49,"cve_count":50,"kev_count":11,"has_kev":17},{"version":52,"cve_count":50,"kev_count":11,"has_kev":17},{"version":54,"cve_count":55,"kev_count":11,"has_kev":17},{"version":57,"cve_count":55,"kev_count":11,"has_kev":17},{"version":59,"cve_count":50,"kev_count":11,"has_kev":17},{"version":61,"cve_count":50,"kev_count":11,"has_kev":17},{"version":63,"cve_count":50,"kev_count":11,"has_kev":17},{"version":65,"cve_count":50,"kev_count":11,"has_kev":17},{"version":67,"cve_count":50,"kev_count":11,"has_kev":17},{"version":69,"cve_count":55,"kev_count":11,"has_kev":17},{"version":71,"cve_count":50,"kev_count":11,"has_kev":17},{"version":73,"cve_count":55,"kev_count":11,"has_kev":17},{"version":75,"cve_count":50,"kev_count":11,"has_kev":17},{"version":77,"cve_count":50,"kev_count":11,"has_kev":17},{"version":79,"cve_count":50,"kev_count":11,"has_kev":17},{"version":81,"cve_count":16,"kev_count":11,"has_kev":17},{"version":83,"cve_count":50,"kev_count":11,"has_kev":17},{"version":85,"cve_count":50,"kev_count":11,"has_kev":17},{"version":87,"cve_count":50,"kev_count":11,"has_kev":17},{"version":89,"cve_count":90,"kev_count":11,"has_kev":17},{"version":92,"cve_count":55,"kev_count":11,"has_kev":17},{"version":94,"cve_count":16,"kev_count":11,"has_kev":17},{"version":96,"cve_count":97,"kev_count":11,"has_kev":17},{"version":99,"cve_count":90,"kev_count":11,"has_kev":17},{"version":101,"cve_count":97,"kev_count":11,"has_kev":17},{"version":103,"cve_count":97,"kev_count":11,"has_kev":17},{"version":105,"cve_count":97,"kev_count":11,"has_kev":17},{"version":107,"cve_count":97,"kev_count":11,"has_kev":17},{"version":109,"cve_count":97,"kev_count":11,"has_kev":17},{"version":111,"cve_count":97,"kev_count":11,"has_kev":17},{"version":113,"cve_count":11,"kev_count":11,"has_kev":17},{"version":115,"cve_count":11,"kev_count":11,"has_kev":17},[167,175,180,184,191,197,203,208,214,219],{"cveId":168,"description":169,"publishedDate":170,"cvssScore":171,"cvssVersion":172,"severity":173,"isKev":17,"epssScore":174},"CVE-2006-5647","Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a malformed CHM file with a large name length in the CHM chunk header, aka \"CHM name length memory consumption vulnerability.\"","2006-11-01",6.4,"v2","Medium",0.21136,{"cveId":176,"description":177,"publishedDate":170,"cvssScore":178,"cvssVersion":172,"severity":173,"isKev":17,"epssScore":179},"CVE-2006-5646","Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service (memory corruption) via a CHM file with an LZX decompression header that specifies a Window_size of 0.",5,0.17924,{"cveId":181,"description":182,"publishedDate":170,"cvssScore":178,"cvssVersion":172,"severity":173,"isKev":17,"epssScore":183},"CVE-2006-5645","Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when \"Enabled scanning of archives\" is set, allows remote attackers to cause a denial of service (infinite loop) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero.",0.17877,{"cveId":185,"description":186,"publishedDate":187,"cvssScore":188,"cvssVersion":172,"severity":189,"isKev":17,"epssScore":190},"CVE-2008-6904","Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via crafted files that have been packed with (1) armadillo, (2) asprotect, or (3) asprotectSKE.","2009-08-06",10,"Critical",0.1056,{"cveId":192,"description":193,"publishedDate":194,"cvssScore":195,"cvssVersion":172,"severity":189,"isKev":17,"epssScore":196},"CVE-2008-5541","Sophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.","2008-12-12",9.3,0.07597,{"cveId":198,"description":199,"publishedDate":200,"cvssScore":201,"cvssVersion":172,"severity":173,"isKev":17,"epssScore":202},"CVE-2007-4578","Sophos Anti-Virus for Windows and for Unix\u002FLinux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an \"integer cast around\".  NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable.","2007-08-28",6.8,0.07296,{"cveId":204,"description":205,"publishedDate":187,"cvssScore":206,"cvssVersion":172,"severity":173,"isKev":17,"epssScore":207},"CVE-2008-6903","Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT\u002F9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Linux before 6.4.5, Anti-Virus for UNIX before 7.0.5, Anti-Virus for Unix and Netware before 4.37.0, Sophos EM Library, and Sophos small business solutions, when CAB archive scanning is enabled, allows remote attackers to cause a denial of service (segmentation fault) via a \"fuzzed\" CAB archive file, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.",4.3,0.06613,{"cveId":209,"description":210,"publishedDate":200,"cvssScore":211,"cvssVersion":172,"severity":212,"isKev":17,"epssScore":213},"CVE-2007-4577","Sophos Anti-Virus for Unix\u002FLinux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a \"BZip bomb\").",7.8,"High",0.0553,{"cveId":215,"description":216,"publishedDate":217,"cvssScore":206,"cvssVersion":172,"severity":173,"isKev":17,"epssScore":218},"CVE-2007-4512","Cross-site scripting (XSS) vulnerability in Sophos Anti-Virus for Windows 6.x before 6.5.8 and 7.x before 7.0.1 allows remote attackers to inject arbitrary web script or HTML via an archive with a file that matches a virus signature and has a crafted filename that is not properly handled by the print function in SavMain.exe.","2007-09-10",0.04759,{"cveId":220,"description":221,"publishedDate":12,"cvssScore":206,"cvssVersion":172,"severity":173,"isKev":17,"epssScore":222},"CVE-2014-2385","Multiple cross-site scripting (XSS) vulnerabilities in the web UI in Sophos Anti-Virus for Linux before 9.6.1 allow local users to inject arbitrary web script or HTML via the (1) newListList:ExcludeFileOnExpression, (2) newListList:ExcludeFilesystems, or (3) newListList:ExcludeMountPaths parameter to exclusion\u002Fconfigure or (4) text:EmailServer or (5) newListList:Email parameter to notification\u002Fconfigure.",0.04464,[],{"title":225,"metaDescription":226,"keywords":227,"structuredData":228},"Anti-virus by Sophos - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Anti-virus by Sophos covering 48 versions with 12 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Anti-virus vulnerabilities, Anti-virus security, Anti-virus CVE, Sophos Anti-virus, Anti-virus threat intelligence, Sophos security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":229,"@type":230,"name":231,"description":226,"url":232,"manufacturer":233,"applicationCategory":237,"softwareVersion":238,"mainEntity":239},"https:\u002F\u002Fschema.org","SoftwareApplication","Anti-virus","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsophos\u002Fanti-virus",{"@type":234,"name":235,"url":236},"Organization","Sophos","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsophos","Security Software","48 versions tracked",{"@type":240,"name":241,"description":242,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Anti-virus Security Vulnerabilities","Security vulnerabilities affecting Anti-virus by Sophos",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":244,"apiVersion":245},"2026-10-17T12:16:06.403Z","3.0",{"rows":247,"total":11,"capped":17,"failed":11},[],[249,251],{"product":250,"cves":97},"anti-virus_for_sophos_central",{"product":252,"cves":97},"anti-virus_for_sophos_home"]