[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCz2-nOv2WVzMzQrw1N392I05y8oIKQFPa9YrfzU8Bsk":3,"g5a-ex:sophos\u002Fscanning_engine@*":73,"g5a-family:sophos\u002Fscanning_engine":75},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":50,"seoMetadata":51,"meta":70},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":20},"sophos","scanning_engine",2,4,0,"2014-02-10",[14,18],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2.30.4",3,false,{"version":19,"cve_count":9,"kev_count":11,"has_kev":17},"2.40.2","Scanning Engine by Sophos is a technology product with 2 tracked versions and 4 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":9,"kev_count":11,"has_kev":17},[25,33,39,45],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":32},"CVE-2007-4578","Sophos Anti-Virus for Windows and for Unix\u002FLinux before 2.48.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UPX packed file, resulting from an \"integer cast around\".  NOTE: as of 20070828, the vendor says this is a DoS and the researcher says this allows code execution, but the researcher is reliable.","2007-08-28",6.8,"v2","Medium",0.07296,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":38},"CVE-2007-4787","The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed (1) CAB, (2) LZH, and (3) RAR files with modified headers, which might allow remote attackers to bypass malware detection.","2007-09-10",5,0.05666,{"cveId":40,"description":41,"publishedDate":28,"cvssScore":42,"cvssVersion":30,"severity":43,"isKev":17,"epssScore":44},"CVE-2007-4577","Sophos Anti-Virus for Unix\u002FLinux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a \"BZip bomb\").",7.8,"High",0.0553,{"cveId":46,"description":47,"publishedDate":12,"cvssScore":48,"cvssVersion":30,"severity":31,"isKev":17,"epssScore":49},"CVE-2014-1213","Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and session objects, which allows local users to bypass anti-virus protection, cause a denial of service (resource consumption, CPU consumption, and eventual crash) or spoof \"ready for update\" messages by performing certain operations on mutexes or events including (1) DataUpdateRequest, (2) MmfMutexSAV-****, (3) MmfMutexSAV-Info, (4) ReadyForUpdateSAV-****, (5) ReadyForUpdateSAV-Info, (6) SAV-****, (7) SAV-Info, (8) StateChange, (9) SuspendedSAV-****, (10) SuspendedSAV-Info, (11) UpdateComplete, (12) UpdateMutex, (13) UpdateRequest, or (14) SophosALMonSessionInstance, as demonstrated by triggering a ReadyForUpdateSAV event and modifying the UpdateComplete, UpdateMutex, and UpdateRequest objects.",5.6,0.00973,[],{"title":52,"metaDescription":53,"keywords":54,"structuredData":55},"Scanning Engine by Sophos - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Scanning Engine by Sophos covering 2 versions with 4 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Scanning Engine vulnerabilities, Scanning Engine security, Scanning Engine CVE, Sophos Scanning Engine, Scanning Engine threat intelligence, Sophos security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":56,"@type":57,"name":58,"description":53,"url":59,"manufacturer":60,"applicationCategory":64,"softwareVersion":65,"mainEntity":66},"https:\u002F\u002Fschema.org","SoftwareApplication","Scanning Engine","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsophos\u002Fscanning_engine",{"@type":61,"name":62,"url":63},"Organization","Sophos","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsophos","Security Software","2 versions tracked",{"@type":67,"name":68,"description":69,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Scanning Engine Security Vulnerabilities","Security vulnerabilities affecting Scanning Engine by Sophos",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":71,"apiVersion":72},"2026-10-17T12:14:00.222Z","3.0",{"rows":74,"total":11,"capped":17,"failed":11},[],[]]