Description
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.
References
- 14270 vdb-entry
- 20050714 Sophos Anti-Virus Zip File Handling DoS Vulnerability third-party-advisory
- 1014488 vdb-entry
- sophos-bzip2-dos(21373) vdb-entry