CVE-2008-6904

Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via crafted files that have been packed with (1) armadillo, (2) asprotect, or (3) asprotectSKE.

Link	Resource
http://marc.info/?l=bugtraq&m=122893252316489&w=2
http://www.sophos.com/support/knowledgebase/article/50611.html	Vendor Advisory
http://www.ivizsecurity.com/security-advisory-iviz-sr-08015.html
http://www.securityfocus.com/bid/32748
https://exchange.xforce.ibmcloud.com/vulnerabilities/52443

Configuration 1

cpe:2.3:a:sophos:anti-virus:4.7.18:*:windows-nt:*:*:*:*:* cpe:2.3:a:sophos:anti-virus:7.0.5:*:unix:*:*:*:*:* cpe:2.3:a:sophos:anti-virus:4.37.0:*:netware:*:*:*:*:* cpe:2.3:a:sophos:anti-virus:4.9.18:*:os_x:*:*:*:*:* cpe:2.3:a:sophos:anti-virus7.6.3:*:windows:*:*:*:*:*:* cpe:2.3:a:sophos:anti-virus:4.7.18:*:windows_9x:*:*:*:*:* cpe:2.3:a:sophos:anti-virus:6.4.5:*:linux:*:*:*:*:*

---

Published : 2009-08-06 01:30

Updated : 2017-08-17 01:29

---

NVD link : CVE-2008-6904

Mitre link : CVE-2008-6904

Sophos

NVD-CWE-noinfo